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Description 

[0001] The present invention is related to tlie recordal, processing, storage and playback of bitstreams, particularly 
audio and/or visual (audio/visual) bitstreams. Three general aspects are described. 

5 [0002] Firstly, the indexing of points in such recorded bitstreams is described, particularly in relation to the bookmak- 
ing of specific points, and to the use of regularly spaced index points in the performance of operations on such recorded 
bitstreams. 

[0003] Secondly, the synchronisation of conditional access information with respect to such recorded bitstreams is 
described. 

10 [0004] Thirdly, a command set for control of operation on such a recorded bitstream is described. 

[0005] The present invention relates to a method of facilitating the searching of a file, a method of searching a file, 
a table, a file comprising a representation of a bitstream and a table, a storage means, a hard disk video recorder, a 
receiver/decoder, and a broadcast system. 

[0006] The invention finds particular, but not exclusive application to the location and retrieval of data from recorded 
15 bitstreams, particularly variable bitrate bitstreams, and particularly programmes recorded under the control of a receiv- 
er/decoder. 

[0007] The present invention also relates to apparatus for evaluating a position in a bit stream, apparatus for manip- 
ulating a bit stream, a method of evaluation a position in a bit stream, a method of manipulating a bit stream, a receiver/ 
decoder, a broadcast system incorporating such apparatus, acomputer program product, a computer readable medium, 
20 and a signal embodying the above computer program product. 

[0008] The invention finds particular, but not exclusive, application in processing digital bit streams. This invention 
has more particular use in the recording phase of bit stream manipulation. 

[0009] The invention also relates to a command for controlling the transfer of an audio/visual bit stream, a command 
set incorporating such a command, an operating system, a receiver/decoder, acomputer program product, acomputer 
25 readable medium, a signal tangibly embodying such a computer program product, apparatus for processing audio/ 
visual data, an audio/visual processing device, a broadcast system, and a method of controlling the reproduction of 

an audio/visual bit stream. 

[0010] The invention finds particular, but not exclusive, application in providing functionality in a receiver/decoder 
for digital television. 

30 [001 1] Digital television systems transmit television channels to the viewer in digital, rather than analogue, form. The 
digital channels are encoded into a digital data stream at the transmitter end, and are decoded at the receiver end 
using a digital receiver/decoder. To allow interactivity, an uplink may be provided, either via the same medium that 
delivers the television channels, or else via a different medium such as a telephone link. Further types of data, such 
as digital audio, software and interactive data can be or are also broadcast. As used herein, the term "digital television 

35 system" includes for example any satellite, terrestrial, cable and other system. 

[0012] The term "receiver/decoder" as used herein may connote a receiver for receiving either encoded or non- 
encoded signals, for example television and/or radio signals, preferably in MPEG format, which may be broadcast or 
transmitted by some other means. The term may also connote a decoder for decoding received signals. Embodiments 
of such receiver/decoders may include a decoder integral with the receiver for decoding the received signals, for ex- 

40 ample, in a "set-top box", such as a decoder functioning in combination with a physically separate receiver, or such a 
decoder including additional functions, such as a web browser, a video recorder, or a television. 
[0013] The term MPEG refers to the data transmission standards developed by the International Standards Organ- 
isation working group "Moving Pictures Expert Group" and in particular but not exclusively the MPEG-2 standard de- 
veloped for digital television applications and set out in the documents ISO 1 381 8-1 , ISO 1 381 8-2, ISO 1 381 8-3 and 

45 ISO 1 381 8-4. In the context of the present patent application, the term includes all variants, modifications or develop- 
ments of MPEG formats applicable to the field of digital data transmission. 

[0014] Generation, storage, transmission and processing of files containing representations of bitstreams, for in- 
stance variable bitrate bitstreams, is well known in the field of digital technology. However, it can be difficult and inef- 
ficient to locate desired portions of such files, corresponding for instance to particular time offsets in an associated 

50 bitstream, particularly without decoding or decompressing such files. 

[0015] In known systems, searching a file, for instance for data corresponding to a particular time offset in the bit- 
stream, is generally done iteratively, typically by assuming that the bitstream has a constant bitrate. The assumption 
that the bitstream has a constant bitrate is generally rather crude, and searching a file in this way is time consuming 
and inefficient, and indeed may make processes dependent upon the location of specified points in a file or associated 

55 bitstream impossible, or difficult and inefficient. Such processes may be, for instance, fast-forwarding, rewinding, skip- 
ping, bookmarking points in a file, controlling access to portions of a file, or analysing characteristics of a file or bitstream 
as a function of time or data offset. 

[0016] DVDs can contain separate files which contain data offsets corresponding to points in the DVD file corre- 
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spending to the start of chapters. However, there is generally a limited number of chapters in a DVD file, and conse- 
quently a limited number of reference points, and such reference points are not directed to mapping time offsets. Such 
data offset files are of little use in searching for particular points in a file, other than the start of chapters. 
[0017] The present invention seel^s to remedy problems encountered with the above prior art. 
5 [0018] Accordingly, there is provided a table comprising at least one record mapping a respective data offset in a 
file containing a representation of a bitstream to a corresponding time offset in the bitstream. 

[0019] Thus, data in a file corresponding to a particular time offset in the bitstream may be accessed rapidly, and 
efficiently. 

[0020] As used herein the term "bitstream" preferably connotes data comprising a series of bits arranged, for instance, 
10 temporally. The term bitstream is used interchangeably with the term datastream. A bitstream may comprise audio/ 
visual data or be representative of such audio/visual data, or it may comprise, or be representative of, teletext infor- 
mation, subtitles, any other type of text information, numerical information, or computer data, including computer pro- 
grammes. 

[0021] Digital and satellite TV transmissions generally comprise at least one bitstream comprising audio/visual data 
15 or a representation of such data. However, data transmitted or stored in or between any digital device, for instance 
computer devices, processors, A/D converters, televisions, HDVRs, or storage devices for instance hard disl^s, tapes, 
computer storage devices, CDs, or DVDs may comprise a bitstream or a representation of a bitstream. 
[0022] A time offset may be the offset in time of a particular point in a bitstream from a defined point, for instance 
the start of the bitstream. A data offset in a file may be a position in memory in relation to a defined position, for instance 
20 the start of a file. If a bitstream is stored as file comprising a series of bits in a memory, then the data offset may be 
the number of bits from the start of the file, for instance. 

[0023] As used herein the term "table" preferably connotes data comprising at least one data point. A table may map 
such at least one data point to at least one other data point of the same or different type, directly or indirectly. A table 
may be in the form of a database, spreadsheet, or a file stored for instance in an electronic data storage device, for 
25 instance a hard disl^, floppy disl^, CD, DVD, or optical storage device, or a non-electronic storage device, for instance, 
a print-out. The term "table" as used herein also connotes an algorithm or process for generating such data point or 
points. 

[0024] In particular, audio/visual data may be in the form of a bitstream representative of a frame or series of frames. 
Such a bitstream may comprise a series of bits representative of pixels or points in such frames. A film or other sequence 
30 of moving images may comprise a series of frames, and each frame may be representative of a different image. As- 
sociated audio information, and indeed other information, such as conditional access or entitlement information, may 
also be included in such bitstreams. 

[0025] Preferably, the bitstream is a variable bitrate bitstream. 

[0026] Thus, data in a file corresponding to a particular time offset in the bitstream may be accessed rapidly and 
35 efficiently, even if there is not a linear relationship between data offset throughout the file and time offset throughout 
the bitstream. 

[0027] As used herein, the term "variable bitrate bitstream" preferably connotes a bitstream comprising a series of 
bits representative of data which may vary with a parameter, for instance time or location, and for which the number 
of bits representative of one portion of the data at a particular value or range of values of the parameter may be different 

40 to the number of bits representative of another portion of data at another value or range of values of the parameter. 
[0028] So, for instance, if a bitstream comprises a series of bits representative of an image frame, and the number 
of bits required to represent a portion of this image, for instance a foreground object, is greater than the number of bits 
required to represent another portion of the image, for instance a plain bacl^g round, then the bitstream may be a variable 
bitrate bitstream and the data offset in the bitstream, or in a file containing a representation of such bitstream, may not 

45 vary linearly with a spatial offset in the image frame itself. 

[0029] In a bitstream comprising, for instance, a series of bits arranged temporally, the bitrate may be the number 
of bits per unit time in the bitstream, and a variable bitrate bitstream, may then be a bitstream in which the number of 
bits per unit time may vary with time offset. 

[0030] If a bitstream comprises a series of bits representative of a series of periodically spaced, time-varying image 
50 frames, for instance a film, and the number of bits necessary to represent one frame is less than the number of bits 
necessary to represent another frame then the bitstream may be a variable bitrate bitstream, and a data offset in a file 
containing a representation of the bitstream may not vary linearly with a time offset in the bitstream, or in the film itself. 
[0031] Such variable bitrate bitstreams may comprise compressed or encoded digital data (or representations of 
such data), such as data transmitted to, stored at, or generated by HDVRs, or indeed any video or audio device, such 
55 as devices included in, or associated with a set top box, or computers, processors or mass storage devices, such as 
a hard disks, or DVDs. Such variable bitrate bitstreams may include data in a variety of compression formats, including 
MPEG-2, MPEG-4, MPS protected by different ciphering algorithms including DVB-CS, DES, 3DES, and may contain 
video and or audio data, teletext information, subtitles, any other type of text information, superimpose data, computer 
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data, or representations of such data. 

[0032] In fact, bitstreams including data in many, if not all, industry-standard compression or encryption formats, 
including those mentioned above, may intrinsically have variable bitrates. 

[0033] For instance, many compression formats use techniques which map changes to reference data from one time 
5 period to another, rather than producing independent data sets for each time period. In particular, MPEG data includes 
key frames, which can be used to regenerate a portion of data, particularly audiovisual data, for instance a frame in a 
film, independently of other portions of data in the bitstream, and delta frames which map changes from associated 
l^ey frames. The bitrate associated with key frames in the bitstream would generally be higher than the bitrate associated 
with delta frames. 

10 [0034] The term "key frame" as used herein preferably connotes a portion of data which can independently be used 
to regenerate a respective further portion of data, independently of any other portion of data. Typically the respective 
further portion of data is audiovisual data, and the key frame may typically be included in a bitstream. 
[0035] A key frame may, for instance, independently be used to regenerate image data for display on a screen, for 
instance a particular scene in a film. 

15 [0036] The term "key frame" may be contrasted with the term "delta frame", which as used herein preferably connotes 
a portion of data which can be used to regenerate a respective further portion of data, in dependence upon another 
portion of data. Typically the said another portion of data is a key frame, and the delta frame maps changes from this 
key frame. 

[0037] For instance a film may comprise a series of images which are displayed consecutively on a screen. Data 
20 representing one image may be in the form of a key frame, and the image may be regenerated from the key frame 
independently of any other portion of data. Data representing subsequent images may be in the form of delta frames, 
and these images may be regenerated from the delta frames in dependence upon the key frame. Typically the delta 
frames would map changes in the images from the image represented by the key frame data. A bitstream may comprise 
a series of key frames interleaved in time with series of delta frames mapping changes from the preceding key frame. 
25 [0038] Under MPEG-2 protocol, video data comprises a series of key frames, known as intraframes (l-frames) inter- 
leaved with interframes (P-frames) and bidirectional frames (B-frames), both of which can be classed as delta frames 
according to the use of this term above. An interframe (P-frame) maps changes from the preceding frame, whereas a 
B-frame maps changes from either or both preceding and following frames. The interleaving of the P-frames and B- 
frames with the l-frames is dependent upon the encoder, and need not be regular. 
30 [0039] If the file is encoded, then preferably the at least one record maps a data offset in the encoded file to a 
corresponding time offset in the bitstream. 

[0040] Thus, the searching of a file for data at particular time offsets, or corresponding data offsets, is enabled without 

the need to decode the file, thus preserving security measures and increasing efficiency of access to data. 

[0041] Such encoded files may include files subject, for instance, to any combination of compression and encryption 

35 processes, such as MPEG-2 and DVB-CS or MPS and 3DES for instance. 

[0042] Preferably, the table comprises at least three records, and the time offsets are periodic. 
[0043] Thus periodically spaced points in time in the bitstream may be accessed quickly and efficiently, enabling 
quick, smooth and efficient operation of time-dependent processes such as skipping, fast-fonwarding and rewinding. 
[0044] Periodic time offsets may be located in particular parts of the bitstream, for instance chapters, or throughout 

40 the whole bitstream, with at least one period. 

[0045] Preferably, the period of the time offsets is varied. Thus the speed of processes such as searching, fast- 
forwarding, rewinding, or skipping may be varied. 

[0046] A period may vary throughout the bitstream, or parts of the bitstream and may vary with time. Periodicities 
may be varied by a user, or may be varied automatically in response, for instance, to a user's behaviour or to the 

45 characteristics of a bitstream, or to the characteristics of data, for instance audio/visual data, represented by the bit- 
stream. Generally, a period would remain the same throughout a particular file track, or programme. 
[0047] For instance, if a particular bitstream comprises a representation of a film, then index points may be inserted 
in a table corresponding to portions of the bitstream with a high bitrate, which may, for example, be associated with 
action sequences in a film. Alternatively, the table may be updated and, for instance, points may be inserted corre- 

50 spending to a particular portion of a bitstream automatically if a user performs a large number of operations corre- 
sponding to that portion of the bitstream, for instance fast forwarding, pausing or rewinding. Such time offsets may 
also be inserted at a user's request. 

[0048] In addition, time offsets and data offsets may correspond to other preferred points in the file or associated 
bitstream, such as the start or end of chapters. 
55 [0049] Preferably, the period of the time offsets is chosen to match a characteristic of the bitstream, and is preferably 
0.5, 1 , 2 or 10 seconds. 

[0050] In the case of an MPEG-2 bitstream for instance, key frames may occur with a frequency of 2 Hz, and thus 
if time offsets of index points are chosen with a period of 0.5 seconds, the index points may correspond to the key 
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frames. Similarly, if the frequency with which key frames occur in a bitstream varies, the period of the time offsets of 
the index points can vary so that index points and key frames coincide. 

[0051] The period of the time offsets can also be chosen to match other characteristics of the bitstream. 

[0052] Preferably, the bitstream comprises at least one portion of bitstream data which can independently be used 

5 to regenerate a respective at least one portion of audiovisual data, and the time offset of the at least one record cor- 
responds to the respective at least one portion of bitstream data. 

[0053] Such portion of data may be a key frame, for instance in an IVIPEG bitstream, and or may be representative, 
for example, of a background image, or overlay image. Such portion of data may be accessed directly and immediately, 
and representative output of audio/visual data may be obtained rapidly at different points throughout the bitstream. 
10 [0054] Preferably, the at least one portion of bitstream data comprises a key frame. 

[0055] Preferably, the bitstream comprises MPEG data, and the at least one portion of bitstream data comprises an 
intra-frame. 

[0056] Preferably, the bitstream comprises at least one further portion of bitstream data which can be used to regen- 
erate a portion of audiovisual data in conjunction with the at least one portion of bitstream data, and preferably the at 

15 least one further portion of bitstream data comprises a delta frame. 

[0057] Thus smooth, rapid, and efficient operation of processes such as fast-forwarding, rewinding and skipping can 
be enabled. The potential maximum speed of these operations may also thus be increased, as the speed with which 
key frames can be located may be increased, and as there may be no need to process dependent portions of data, 
such as delta frames, or only a limited number of such dependent portions of data may need to be processed. 

20 [0058] Preferably, the table is generated automatically during recordal of the representation of the bitstream in the file. 
[0059] Thus, no further processing of the recorded bitstream is necessary after recordal of the bitstream is complete, 
and the HDVR index table is in place even if the recording is interrupted or terminated. 

[0060] Preferably, at least one record in the table is mapped to a respective at least one further record, and preferably 
the said at least one further record comprises conditional access information or content management information. 

25 [0061 ] Such content management information or conditional access information may be, for instance, a control word 
(CW), or CMMs, ECMs, EMMs, URMs, or associated information, which may be associated with data located at a 
particular value or range of values of data offset or time offset. Typically, the bitstream may be divided into time seg- 
ments, or cryptoperiods (encompassing a range of time offsets), and the further record may be associated with a 
particular cryptoperiod or plurality of cryptoperiods. The further record may also be associated with, for instance, chap- 

30 ters, or with files as a whole, or with particular users or groups of users. Access to data may be enabled rapidly and 
efficiently by reading stored related information corresponding to particular data offsets or time offsets. Such rapid 
access to data may be particularly important in respect of processes such as fast-fonwarding, rewinding, or skipping. 
[0062] In particular, the further record may comprise a CMM or plurality of Cl\/ll\/ls. 

[0063] If the point in the table maps to a data offset in a file which does not correspond to the start of a cryptoperiod, 
35 then the HDVR would generally not have access to the CMM, or a pointer to such CMM, or other content management 
or conditional access information, necessary to decode the data at that point. The HDVR would typically have to read 
consecutively forward or backward through the file in order to find the next set of such information or pointer to such 
information in order to begin decoding data. By mapping at least one record in the table to at least one further record, 
conditional access or content management information applicable to the point in the file indexed by the record can be 
40 provided, and data from this point can be decoded immediately, without first having to read through the file to find such 
information. This feature is of particular advantage if data at a number of points in a file needs to be read consecutively 
and rapidly, for instance in performance of certain trick mode operations, such as fast forwarding or rewinding. 
[0064] The further record may also comprise, for instance, comments, which could be displayed on a screen, or 
commands, such as television control commands. Alternatively, the data could be related to a parental control mech- 
45 anism. Such parental control mechanism may be directed to particular chapters, but may also be directed to cryptope- 
riods and pluralities of cryptoperiods, and user defined portions of a file. 

[0065] The further record may be stored in the table of records, or in a separate file or table, or the table of records 
and or the related information may be stored with the file, for instance in a header. 
[0066] Preferably, the said at least one further record is stored in a further table. 
50 [0067] The entries in such a further table may be mapped easily to entries in the table mapping data offsets to time 
offsets. 

[0068] Preferably, the said at least one further record is inserted upon command of a user. 

[0069] Thus, a user may add, or indeed remove, information relating to characteristics of a programme or a bitstream. 
For instance, a user may select particular scenes within a recorded film to which they wish to control access, and such 
55 access could be controlled by addition or amendment of a record activating a parental control mechanism. 

[0070] Preferably, the said at least one record in the table is mapped to the respective at least one further record 
upon command of a user. 

[0071] Thus, a user can control which records are associated with which further records. 
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[0072] Preferably, the file is encoded and the at least one record maps a data offset in the encoded file to a corre- 
sponding time offset in the bitstream. 

[0073] Preferably, records are inserted in dependence upon characteristics of the bitstream. 
[0074] Preferably, at least one record is inserted upon command of a user. 
5 [0075] Thus, points in a file may be bookmarked by a user for ease of access. 

[0076] The records may be inserted, or indeed deleted or modified, by a user 'on-the-fly', whilst, for instance, viewing 
a programme, or reading a file, or may be inserted in the file at points corresponding to user-specified intervals through- 
out the bitstream. 

[0077] Preferably, at least one record is inserted automatically. 

10 [0078] Thus, the user may bookmark particular parts of the bitstream of interest without having to review the file or 
the bitstream, in whole or part, directly or indirectly. For instance, a user may bookmark parts of a film a representation 
of which is stored in a file containing a representation of a bitstream, without having to view the film. 
[0079] Particular types of data, or a portion of the bitstream where, for instance, the ratio of data to time in the 
bitstream is within a certain range (which may correspond, for instance, to action sequences in a film, or to scenes in 

15 a film with highly contrasting images, such as explosions, or lightning strikes) may be located and bookmarked. 
[0080] Preferably, the table is adapted for storage in a file with the representation of the bitstream. 
[0081] Thus the file and associated table may be easily, for instance, stored, processed or transmitted together. For 
example, the table may be generated at a broadcast centre and transmitted with the file, and thus an HDVR, or other 
device, may be able to read the table and use the information contained within it, without requiring the capability to 

20 generate the table itself. Also, the broadcaster may retain centralised control over files and associated tables. 

[0082] The table may also be generated and or stored at an HDVR, or within any device included in, or associated 
with a set top box, or within any device adapted to read digital data. 

[0083] In a related aspect of the invention, there is provided a method of facilitating the searching of a file containing 
a representation of a bitstream, comprising generating a table comprising at least one record mapping a respective 

25 data offset in a file containing a representation of a bitstream to a corresponding time offset in the bitstream. 
[0084] As before, the bitstream is preferably a variable bitrate bitstream. 
[0085] Preferably, the table comprises at least three records, and the time offsets are periodic. 
[0086] If the time offsets are periodic, then their period is preferably chosen to match a characteristic of the bitstream, 
and is preferably 0.5, 1 , 2 or 1 0 seconds. 

30 [0087] Preferably, the bitstream comprises at least one portion of bitstream data which can independently be used 
to regenerate a respective at least one portion of audiovisual data, and the time offset of the at least one record cor- 
responds to a respective at least one of portion of bitstream data. The at least one portion of bitstream data could 
comprise a key frame, such as an intra-frame if the bitstream comprises IVIPEG data, for example. 
[0088] As before, preferably the bitstream comprises at least one further portion of bitstream data which can be used 

35 to regenerate a portion of audiovisual data in conjunction with the at least one portion of bitstream data, and the at 
least one further portion of bitstream data may comprise a delta frame. 

[0089] Preferably, the table is generated automatically during recordal of the representation of the bitstream in the file. 
[0090] Again, at least one record in the table is mapped to a respective at least one further record, and preferably 
the said at least one further record comprises conditional access information or content management information. 
40 [0091] Preferably, the said at least one further record is stored in a further table. 

[0092] As before, the said at least one further record is inserted upon command of a user. 

[0093] Preferably, the at least one record in the table is mapped to the respective at least one further record upon 
command of a user. 

[0094] Preferably, the file is encoded and the at least one record maps a data offset in the encoded file to a corre- 
45 spending time offset in the bitstream. 

[0095] Preferably, at least one record is inserted in dependence upon characteristics of the bitstream. 
[0096] Preferably, at least one record is inserted upon the command of a user. 
[0097] Preferably, at least one record is inserted automatically. 

[0098] Preferably the table is stored in a file containing the representation of the bitstream. 
50 [0099] In a further aspect, there is provided a method of searching a file containing a representation of a bitstream 
for a desired portion of data, comprising the steps of jumping to a position in the file, and reading data from this position 
until the desired portion of data is found. 

[0100] This can provide a more efficient way to find a particular point in a file than alternative methods which advance 
through the file bit-by-bit until they reach the desired point, for example. 
55 [0101] Again, preferably the bitstream is a variable bitrate bitstream. 

[0102] Thus, a particular point in a file can be found more efficiently than using methods which advance through the 
file bit-by-bit until they reach the desired point, for example, even if there is not a linear relationship between data offset 
in the file and time offset in the bitstream. 
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[0103] Preferably, the desired portion of data is representative of bitstream data wliicli can independently be used 
to regenerate a further portion of data 

[0104] The further portion of data may, for instance be audiovisual data, and the desired portion of data may be a 
key frame. 

5 [0105] Preferably, the step of jumping to a position in the file comprises reading a record from a table as herein 
described and jumping to the data offset given in the record. 

[0106] Preferably, the step of jumping to a position in the file comprises reading a record from a table as herein 
described and jumping to the data offset given in the record, and the at least one further record is used in the step of 
reading data. 

10 [0107] The at least one further record may be conditional access information, or content management information, 
and may in particular be a CMIVI or a plurality of CMMs. The further record may be used to decode the data in the file. 
[0108] Preferably, the data offset in the record corresponds to the desired position in the file. 
[0109] Thus the desired point can be found by jumping to the point in the file corresponding to the data offset in the 
file, without the need to read additional data before locating the desired point in the file. 

15 [0110] In a further aspect, there is provided a method of searching a file containing a representation of a bitstream 
for a plurality of desired portions of data, comprising searching for each desired portion of data using a method as 
described herein. 

[01 1 1] Thus a series of desired points in the file can be located quickly and efficiently, and data at these points can 
be read. 

20 [01 1 2] Preferably, the desired portions of data are representative of portions of bitstream data which are periodically 
spaced in time. 

[01 1 3] Thus, portions of the bitstream which are equally spaced in time can be located and read quickly and efficiently, 
which may enable quick and efficient performance of trick mode operations, such as fast forwarding or rewinding, on 
the stored bitstream. 

25 [01 14] Preferably, the desired portions of data are used to effect a fast forwarding or rewinding operation. 

[0115] The desired portions of data are located and read, typically using associated CMMs, and the resulting data, 
usually audiovisual data, may be output to a display device. 

[01 1 6] Preferably, the time period between the portions of bitstream data represented by the desired portions of data 
is chosen to effect a given fast-forwarding or rewinding speed. 
30 [01 1 7] Preferably, the time period between the portions of bitstream data represented by the desired portions of data 

is chosen in dependence upon a characteristic of a means used to carry out the method. 

[0118] The maximum rate at which data may be located, read and displayed by a means, such as an HDVR in 
conjunction with a display device, is dependent upon characteristics of such means, and may be dependent upon 
either hardware or software characteristics. A given fast forwarding or rewinding speed, for instance, may only be 
35 sustainable if a certain proportion of the data in the stored file is played back. For instance, it may not be possible to 
play back all data in the file at a faster than normal rate. On the other hand, if the proportion of data which is played 
back is limited too severely, image quality for instance may be degraded. 

[01 19] Preferably, the characteristic is the maximum sustainable rate of retrieval or processing of data from the file. 

[0120] By varying the time period between the portions of bitstream data, the maximum sustainable rate of retrieval 
40 or processing of data from the file can be obtained, for given characteristics of the means. Thus, for instance, the 
optimum picture quality may be obtained for a given fast fonwarding or rewinding speed. 

[0121] Preferably, the characteristic is a read/write hard disk access time, or a parsing demultiplexer bandwidth, or 
an operating system scheduling accuracy. 

[0122] Preferably, the given fast-forwarding or rewinding speed is varied upon command of a user. 
45 [01 23] In a further aspect, there is provided a file, comprising a representation of a bitstream, and a table as described 
herein. 

[0124] In yet further aspects, there is provided a processor for generation of a table as described herein, and a 
processor for analysis of characteristics of a bitstream and insertion of records in such a table in dependence upon 
this analysis. 

50 [0125] There is also provided a storage means for storage of a table as described herein, and preferably the storage 
means is adapted for storage of the file containing a representation of a bitstream. 

[0126] There is also provided a hard disk video recorder comprising a storage means as described herein and pref- 
erably further comprising a processor as described herein, and a receiver/decoder comprising such a hard disk video 
recorder. Preferably there is also provided a broadcast system incorporating such a receiver/decoder. 
55 [0127] In a further aspect, there is provided a receiver/decoder adapted to communicate with a hard disk video 
recorder as described herein, and a broadcast system incorporating such a receiver/decoder. 

[0128] The invention further provides a computer program and a computer program product for carrying out any of 
the methods described herein and/or for embodying any of the apparatus features described herein, and a computer 
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readable medium having stored tliereon a program for carrying out any of tine methods described herein and/or for 
embodying any of the apparatus features described herein. 

[0129] The invention also provides a signal embodying a computer program for carrying out any of the methods 
described herein and/or for embodying any of the apparatus features described herein, a method of transmitting such 
a signal, and a computer product having an operating system which supports a computer program for carrying out any 
of the methods described herein and/or for embodying any of the apparatus features described herein. 
[0130] Turning to consideration of further aspects of known systems, some known systems are able record to hard 
disk received scrambled bit streams (that is, the encoded digital television signals). In one such system, the bit stream 
is retained in the compressed and scrambled form when recorded it, but the recording is then only valid for the duration 
of the exploitation key (which is replaced on a regular basis). One technique which overcomes this problem essentially 
consists of extracting Entitlement Control Messages (ECMs) from the bit stream before it is recorded, decrypting the 
ECMs as per usual, re-encrypting the ECMs with an internal exploitation key (unique to each subscriber), and inserting 
the ECMs back into the bit stream in their original positions (all the time not altering the control words used to scramble 
the bit stream). This has the desired effect of increasing security, but is complicated to implement, not least because 
it demands that the position of each ECM within the bit stream be determined precisely, which is very computationally- 
intensive. 

[0131] The present invention also seeks to remedy problems in the above and other prior art. 

[0132] Accordingly, in a further aspect of the invention, there is provided apparatus for evaluating a position in a bit 

stream, comprising means for estimating the position. 

[01 33] By estimating the position, instead of determining it exactly, for example, the process of evaluating the position 
can be made more efficient. 

[0134] The position is preferably the spatial position of a data packet, such as an MPEG table, within the bit stream. 
It may alternatively be the temporal position within the bit stream, measured in seconds, for example. Preferably the 
apparatus is adapted to operate in respect of a bit stream being processed in real-time, but it may also be adapted to 
operate in respect of a static and/or random access bit stream. Furthermore, the bit stream preferably contains pack- 

etised (such as MPEG format) and/or audio/visual data. 

[0135] The term "audio/visual" as used herein preferably connotes either audio or visual matter, or a combination of 
the two. In the context of a broadcast signal received by a receiver/decoder, the term may encompass subtitle, teletext, 
synchronisation and other data transmitted in close relation to audio and video components making up a television 
programme. 

[0136] The means for estimating the position is preferably adapted to estimate the position in dependence on a 
known position in the bit stream. The known position could be, for example, a transition between different portions of 
the bit stream. The dependence of the estimation on a known position in the bit stream can allow the estimate to be 
made more precisely. 

[0137] In a preferred embodiment, the apparatus further comprises means for selecting the known position from a 
plurality of alternatives. This can allow the estimate to be further refined, by increasing the selectivity of the process. 
[0138] Consequently, the means for selecting the known position is preferably adapted to select the known position 
in dependence on its proximity to the position to be evaluated. 

[0139] Thus, while the position to be estimated may not itself be easily or at all determinable exactly, it may be 
possible to determine known positions which are near to the position to be estimated, preferably in preference to other 
known positions which are not as close to the position to be evaluated. This can allow the accuracy with which the 
position is estimated to be more appropriately limited in accordance with at least one known position in the bit stream. 
[0140] The means for selecting the known position may be adapted to select systematically one of the two known 
positions closest to the position to be evaluated. This can further improve the accuracy of the estimation. In particular, 
the known position may be chosen to be the closest position either before or after the estimated position. In either 
case, this can bias the estimate of the position either generally backwards or generally fonwards in the bit stream, 
respectively. Alternatively, the known position may be chosen to be the closest position in either direction, which can 
result in no general bias of the estimate. 

[0141] Furthermore, the means for selecting the known position may be adapted to select the known position as a 
transition in the bit stream between a first and second portion of the bit stream. Such first and second portions could 
be, for example, segments of the bit stream transferred in direct memory access (DMA) data transfers. 
[0142] This can make the estimation more efficient by making use of existing divisions of the bit stream when deter- 
mining the known position. One of the portions of the bit stream may contain the position to be estimated. 
[0143] Preferably the means for estimating the position may be adapted to estimate the position as an offset from 
the known position, thereby allowing time-displacement effects to be taken into account in the estimate. The offset 
may be zero, in which case the estimated position is equal to the known position or it may be positive or negative. 
[0144] Furthermore, the means for estimating the position may be adapted to estimate the position in dependence 
on a buffer size. Preferably the position is estimated by, amongst other things, adding the buffer size to the known 
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position. The buffer size (preferably defined as a maximum size, or alternatively expected or exact size) may relate to 
a buffer used to transport the bit stream, such as a FIFO, for example. By estimating the position in dependence on 
the buffer size, in effect consideration can be taken of the uncertainty and/or delay arising from the use of such a buffer. 
[0145] Alternatively or additionally, the means for estimating the position may be adapted to estimate the position in 
dependence on a security parameter. In particular, the position may be estimated by, amongst other things, adding the 
security parameter to the known position. The security parameter may be negative or positive, and is preferably em- 
ployed as a 'safety factor' to ensure that the estimate either exceeds or remains within a critical value, and can alter- 
natively or additionally encapsulate into a single correction factor a plurality of uncertainties or biases influencing the 
estimate (such as possible timing errors, software latencies, unknown packet sizes, and so on). 
[0146] In the preferred embodiment, the apparatus may further comprise means for storing the bit stream. This means 
for storing preferably comprises a controller for causing the bit stream to be stored, but may alternatively or additionally 
comprise a corresponding storage device, such as a hard disk. This can improve the versatility of the apparatus. 
[0147] In this case, the apparatus may further comprise means for storing data associated with the bit stream sep- 
arately from the bit stream. The data associated with the bit stream preferably comprises at least one of the estimated 
position, data corresponding to the estimated position, and information which can allow the data corresponding to the 
estimated position to be synchronised with the stored bit stream. The means for storing data associated with the bit 
stream separately from the bit stream is preferably adapted to store conditional access data. 

[0148] This important feature is also provided in respectof a related aspect of the invention, which provides apparatus 
for manipulating a bit stream, comprising means for receiving conditional access data, means for synchronising the 
conditional access data with the bit stream, and means for storing the bit stream. 

[0149] By synchronising conditional access data with the bit stream, reliance can be reduced on any conditional 
access data within the bit stream itself. 

[0150] As mentioned above, the apparatus preferably further comprises means for storing the conditional access 
data separately to the bit stream. However, the apparatus may instead comprise means for storing the conditional 
access data in the bit stream, by multiplexing or othenwise reinserting the data into the bit stream, for example. In the 
former case, the conditional access data may be included in a separate part of a file also containing the stored bit 
stream, or it may be stored in a separate file or in a different storage medium. 

[0151] This can improve the efficiency with which the conditional access data is managed, for example by allowing 
faster access to the generally smaller volume (with respect to the corresponding bitstream) of conditional access data. 
[0152] The means for synchronising is preferably adapted to create a reference between the conditional access data 
and a corresponding position in the bit stream. The apparatus more preferably further comprises means for storing the 
or each reference with or in close proximity to the conditional access data and/or bit stream. This can facilitate the task 
of synchronising the conditional access data with the bit stream. 

[01 53] The apparatus may in addition comprise means for storing the reference in a table, which can further facilitate 
access to the conditional access data, for example, during reproduction of the bit stream. 

[0154] The means for synchronising is adapted to select the referenced position (that is, the 'corresponding position' 
in the reference between the conditional access data and a corresponding position) from a range of safe values. 
[0155] The range of safe values preferably comprises an actual position in the bit stream corresponding to the con- 
ditional access data, this being the position in the bit stream at which the conditional access data (or a copy thereof) 
is actually transmitted. 

[0156] If the means for synchronising is adapted to select the referenced position such that it falls within a portion 
of the bit stream to which the conditional access data corresponds, the means for synchronising is preferably further 
adapted to select the referenced position such that it falls within a cryptoperiod to which the conditional access data 
corresponds. 

[0157] This matching of the referenced position with the cryptoperiod to which the conditional access data corre- 
sponds can improve the quality of the synchronisation between the bit stream and conditional access data. 
[0158] Preferably the means for synchronising is adapted to select the referenced position in dependence on an 
event signifying the receipt of the conditional access data by the receiving means. This can allow the bit stream and 
conditional access data to be yet more closely synchronised. 

[0159] As previously mentioned, the apparatus may further comprise means for estimating a position in the bitstream, 
but also with the referenced position being selected in dependence on the estimated position. 
[0160] If as is preferred, the apparatus preferably further comprises means for transferring the bit stream in a plurality 
of discrete segments, the means for estimating the position is preferably adapted to estimate the position in dependence 
on an end of one of the segments, and furthermore the apparatus preferably further comprises means for predeter- 
mining the size of at least one segment. This can improve the flexibility of the estimation process, as the variation of 
the size of the at least one segment can directly or indirectly affect the estimate itself and the stability of the estimation 
process. 

[0161] The predetermination preferably involves setting the size of the segment, although it may alternatively involve 
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detecting the size of the segment. Possibly depending on factors such as system performance, FIFO and hard disk 
size, each segment could be as small as 1 bit and as large as 100 Mb or even greater, for example. For efficiency, 
values between approximately 1 Mb and, say, 6 Mb may be appropriate for a typical MPEG audio/visual bit stream, 
however. The means for transferring may, for example, be a direct memory access (DMA) controller, a mass storage 

device, a FIFO and/or FIFO manager, and so on. 

[0162] In a related aspect of the invention, there is provided apparatus for manipulating a bit stream, comprising 
means for transferring the bit stream in a plurality of discrete segments, and means for estimating a position in the bit 
stream in dependence on a property of one of the segments. 
[0163] Such a property could be segment size, for example. 

[0164] As mentioned previously, preferably the means for estimating a position is adapted to estimate the position 
of conditional access data, such as an ECM, in the bit stream. Also as mentioned previously, the apparatus preferably 
further comprises means for predetermining the size of a segment, which as noted can increase the flexibility of the 
estimation. 

[0165] The means for predetermining the size is ideally adapted to predetermine a size equivalent to less than a 
portion of the bit stream associated with the position. Such a portion may be a predetermined number of cryptoperiods, 
in which case the number of cryptoperiods need not be an integer, and indeed may be, for example, slightly less than 
a whole number to take into account the effect of FIFO buffers. This can ensure the safety of the estimation. 
[0166] The means for predetermining the size may also or alternatively be adapted to predetermine the size in de- 
pendence on a characteristic of the bit stream. By determining the size of a segment in dependence on a characteristic 
of the bit stream, account can be taken of factors related to the bit stream which may affect the accuracy of the estimate, 
for example. 

[0167] Furthermore, the means for predetermining the size may be adapted to predetermine the size in dependence 
on a bit rate of the bit stream. Preferably this bit rate is an average bit rate, which may be computed in respect of the 
segment in question, or any other portion of the bit stream which preferably contains the position. 
[0168] If the means for predetermining the size is adapted to predetermine a constant size, the means for predeter- 
mining the size may moreover comprise a static filter. If, on the other hand, the means for predetermining the size is 
adapted to predetermine a variable size, the means for predetermining the size preferably comprises a dynamic filter. 
[0169] Both types of filter preferably accept as an input at least one characteristic of the bit stream, and produce as 
an output a desired segment size. Indeed, preferably a number of filter coefficients are used, corresponding to a series 
of characteristics of the bit stream. 

Such characteristics could be as described above. The filter can be implemented in software, under the control of a 
digital signal processor (DSP), coprocessor, or main processor, for example. The term 'filter' as used herein preferably 
connotes a process or apparatus for transforming at least one input into at least one output; such filters could be seen 
as the product of a mathematical formula whose variables are the filter inputs. 

[0170] Furthermore, the means for predetermining the size may comprise at least one of a rapid dynamic filter, an 
inertial dynamic filter, and a hybrid dynamic filter. The rapid and inertial filters may be characterised in having relatively 
few and relatively many input values, respectively. The hybrid filter may be characterised in having properties of both 
the rapid and inertial filters, and is preferably effectively a combination of a rapid and an inertial filter, with the overall 
filter output selected as the output of a particular one of these two sub-filters in dependence on a particular constraint, 
such as whether or not a particular input is increasing or decreasing. 

[0171] The means for estimating the position may be adapted to take into account an error in at least one previous 
estimate. Such an error could be, for example, a time difference observed a posteriori between an estimated position 
and an actual position. This can allow the estimate to be refined over time. 

[0172] The apparatus may further comprise means for estimating the position in dependence on at least one char- 
acteristic of the bit stream. This can produce a yet more accurate estimate particularly where, for example, more 
information is available regarding the bit stream. 

[0173] This important feature is also provided independently. Accordingly, in a related aspect of the invention, there 
is provided apparatus for evaluating a position in a bit stream, comprising means for estimating the position in depend- 
ence on at least one characteristic of the bit stream. 

[0174] The or each characteristic is preferably at least one of a bit rate of the bit stream, the relative position within 
the bit stream, and the time elapsed between parts of the bit stream. 

[0175] The apparatus may further comprise means for estimating a measure of separation between the occurrence 
of the position and the occurrence of an event relating to the position. Such a measure of separation could be the time 
At discussed below, for example. This can provide more information with which to make a better estimate. 
[0176] The means for estimating the position in the bit stream is preferably adapted to incorporate the measure of 
separation, preferably in conjunction with an estimate of the bit rate of the bit stream close to the position in the bit 
stream. This can further refine the estimation process. 

[0177] The means for estimating a measure of separation is preferably adapted to measure the separation between 
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the occurrence of the position and the end of a processing operation. 

The processing operation is preferably related to the processing of data associated with the position in the bit stream. 
[0178] In a further related aspect of the invention, there is provided a receiver/decoder incorporating apparatus (in 
any of the various aspects) as aforesaid. 
5 [0179] There is also provided, in a yet further aspect, a method of evaluating a position in a bit stream, comprising 
estimating the position. 

[0180] In another aspect of the invention, there is provided a method of manipulating a bit stream, comprising re- 
ceiving conditional access data, synchronising the conditional access data with the bit stream, and storing the bit 
stream. 

10 [0181] In a further aspect of the invention, there is provided a method of manipulating a bit stream, comprising trans- 
ferring the bit stream in a plurality of discrete segments, and estimating a position in the bit stream in dependence on 
a property of one of the segments. 

[0182] In a yet further aspect of the invention, there is provided a method of evaluating a position in a bit stream, 
comprising estimating the position in dependence on at least one characteristic of the bit stream. 
15 [0183] In another aspect of the invention, there is provided a broadcast system comprising a broadcast centre and 
a receiver/decoder as aforesaid. 

[0184] In a further aspect of the invention, there is provided a computer program product adapted to carry out a 
method as aforesaid. 

[0185] In a yet further aspect of the invention, there is provided a computer readable medium having stored thereon 
20 a computer program product as aforesaid. 

[0186] In another aspect of the invention, there is provided a signal tangibly embodying a computer program product 
as aforesaid. 

[0187] The invention also provides a computer program and a computer program product for carrying out any of the 
methods described herein and/or for embodying any of the apparatus features described herein, and a computer read- 
25 able medium having stored thereon a program for carrying out any of the methods described herein and/or for embod- 
ying any of the apparatus features described herein. 

[0188] The invention also provides a signal embodying a computer program for carrying out any of the methods 
described herein and/or for embodying any of the apparatus features described herein, a method of transmitting such 
a signal, and a computer product having an operating system which supports a computer program for carrying out any 

30 of the methods described herein and/or for embodying any of the apparatus features described herein. 

[0189] Turning to consideration of further prior art, video cassette recorders and also audio cassette recorders have 
become ubiquitous, having application in both domestic and professional environments. However, their principal short- 
coming is that data signals are recorded on a tape, and can therefore only be accessed serially. The tape must be fast- 
wound if a section of it is to be skipped, or to access a particular part of a recording. This is a relatively slow procedure. 

35 Moreover, many tape recorders, particularly of the low-cost type most commonly found in domestic applications, are 
incapable of reproducing a recording at a speed other than that at which it was recorded (for a slow-motion or accel- 
erated motion effect) or a single frozen frame of a recording without significant distortion of the display. 
[0190] High-capacity mass data storage devices, and in particular, hard disc drives, now have a storage capacity 
large enough to enable them to store a significant amount of digitally-encoded video and/or audio signals, particularly 

40 when such signals are encoded using an efficient compression algorithm such as MPEG. Any given piece of data 
stored on the device can be accessed, at least from the point of view of a human operator, essentially instantaneously. 
The availability of such devices has led to development of apparatus for recording and reproducing video and/or audio 
signals in which the signals are stored on such a mass-storage device. 

[0191] Implementation of video and/or audio playback apparatus using such mass storage has the potential to offer 
45 a user far greater operational flexibility than a conventional tape-based video and/or audio recorder, and gives devel- 
opers the opportunity to provide video and/or audio playback products that have a range of capabilities beyond those 
of a conventional tape recorder. It is a further aim of this invention to provide means by which a developer can make 
use these features offered by such playback apparatus. 

[0192] Accordingly, in a further aspect of the invention, there is provided a command for controlling the transfer of 
50 an audio/visual bit stream, wherein the transfer speed is represented as a parameter. 

[0193] The transfer is preferably the reproduction of audio/visual data, from a mass storage device to an audiovisual 

playback device (such as an MPEG decoder and/or video output device), for example. Alternatively (and not exclu- 
sively), the transfer may be the recording of audio/visual data, from a live broadcast (or other) signal source to a mass 
storage device, for example. 

55 [0194] By being able to set the transfer speed via a parameter of the command, a number of different effects can be 
achieved with a call to the same command. Such a command could, for example, be used to control the operations of 

a virtual (or real) video recorder or other random access or sequential access storage device. The set_speed() com- 
mand described later is an example of such a command, applied principally to the reproduction of audio/visual data. 
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[0195] The term "audio/visual" as used herein preferably connotes either audio or visual matter, or a combination of 
the two. In the context of a broadcast signal received by a receiver/decoder, the term may encompass subtitle, teletext, 
synchronisation and other data transmitted in close relation to audio and video components making up a television 
programme. 

[0196] The term "command" as used herein preferably connotes a physical manifestation of a software routine pro- 
grammed to carry out a specified function, preferably in the form of electrical impulses in a memory or in a more 
permanent form, such as a recording of the routine on a suitable data carrier, for example. Preferably the manifestation 
of the routine is immediately executable by a processor, being stored as object code, for example. The term may also 
be extended to cover the actual invocation of such a routine, either in the form of a physically-embodied instruction to 
execute the routine, or as an actual signal - such as a remote procedure call (RPC) - designed to cause the routine to 
execute. 

[0197] The speed maybe positive, zero and/or negative. In the case where the transfer is a reproduction, if the speed 
is positive, the reproduction would preferably be one of normal playback, slow playback, fast forwarding, and stop/ 
pause. Alternatively, if the speed is negative, the reproduction would preferably be one of fast rewind and slow rewind. 
Thus, by allowing such a range of speeds, the flexibility offered by the command can be increased. 
[0198] If the range of speeds is limited by hardware or other considerations, the maximum speed is preferably the 
equivalent of 2, 5, 1 0, 50, 1 00 or 500 times a normal transfer speed. Correspondingly, the minimum speed may be the 
equivalent of 1 , 0, -1 , -2, -5, -1 0, -50, -1 00 or -500 times the normal transfer speed (a minimum of 0 or more preventing 
the possibility of 'rewinding' the stream, in the reproduction case, and a minimum of 0 or less opening the possibility 
of storing an audio/visual bit stream in reverse, in the recording case). The range of speeds may be a continuous range, 
allowing smooth transitions between different transfer speeds, for example, or a discrete set of speeds, for example, 
possibly taking into account hardware limitations. The parameter of the command may, in fact, be an arbitrary speed 
which is converted into one of the discrete set of speeds, as appropriate, during the execution of the command or 
subsequently. 

[0199] The speed is preferably related to the parameter by a multiple of a normal transfer speed (such as the normal 

playback speed in the reproduction case). This can greatly simplify procedures invoking the command, since they 
might not need to calculate corresponding bit rates for reproduction of the bit stream, for example. In the recording 
case, the parameter may, for example, specify the desired frame rate (such that if it was lower than the normal frame 
rate, the command would cause frames to be discarded from the stored bit stream at an appropriate rate). 
[0200] If the speed was equal to the parameter multiplied by a normal transfer speed, for example, a parameter of 
1 would be equivalent to a normal transfer speed, a parameter of 0 would result in the transfer being paused, and a 
parameter greater than 1 would correspond to fast fonwarding (in the reproduction case) or recording at a lower quality/ 
speed (in the recording case), for example. Alternatively, there may be a more complex relationship between speed 
and parameter, whereby a constant value is subtracted from either the speed or parameter, for example. 
[0201] Preferably a position from which the transfer is to take place is represented as a parameter. This can allow 
further flexibility in the transfer of an audio/visual bit stream. In the case where the transfer is the reproduction of audio/ 
visual data, the position from which the transfer is to take place is preferably an offset into the audio/visual data, and 
may be set to the nearest bit, byte, given other data multiple, given period of time, or frame of data, or may othenwise 
or additionally be specified in terms of programme or track numbers. Otherwise, in the recording case, for example, 
the position can be relative to a position on a mass storage device, setting the position at which recording is to start 
or continue. 

[0202] This important feature is also provided independently. Accordingly in a further aspect of the invention there 
is provided a command for controlling the transfer of an audio/visual bit stream, wherein the position from which the 
transfer is to take place is represented as a parameter. The setj30s() routine described later is an example of such a 
function. 

[0203] The parameter specifying the position from which reproduction is to take place may be related to a measure 
of time, which can free the invoking routine from calculations relating the time to the data offset in the bit stream. 
[0204] If, instead, the parameter specifying the position from which reproduction is to take place is related to an offset 
in the bit stream (or location on a mass storage device, for example), the command can be more simply implemented, 
resulting in a saving of memory and increasing the speed of execution. 

[0205] In another aspect of the invention, the is provided a command set, comprising at least one command as 
aforesaid. This can allow a wide range of more specialised commands to be implemented easily, by using any of the 
above-mentioned commands as building blocks. 

[0206] This important feature is also provided independently, and accordingly there is also provided a command set 
for controlling the transfer of an audio/visual bit stream, comprising a command having the position from which repro- 
duction is to take place represented as a parameter, and a command having the transfer speed represented as a 
parameter. 

[0207] In a further related aspect of the invention, there is provided a command for controlling the transfer of an 
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audio/visual bit stream, the command adapted to invoke at least one command as aforesaid. 

[0208] The command may be adapted to selectively invoke different further commands in dependence on a state 
relating to the transfer of the audio/visual bit stream. Such a state could be, for example, whether the transfer was 
paused or not (in other words, whether or not the transfer speed was zero); in this case, the command could, for 
5 example, call one further command when the transfer is paused, and a different further command when the transfer 
is in progress. 

[0209] This can allow the further commands to be simplified, since they could be written without having to take into 
consideration certain values of the abovementioned state. 

[0210] Alternatively or additionally, the command may be adapted to invoke a command (preferably for setting the 
10 transfer speed) as aforesaid, with a parameter equivalent to a normal transfer speed, and invoke acommand (preferably 
for setting the position of reproduction) as aforesaid, with a parameter equivalent to a position in the audio/visual bit 
stream. Preferably such a command is adapted to start playback in the audio/visual bit stream, and may itself corre- 
spond to or be invoked by a 'play' or a 'seek and play' command. Also, such a command preferably has at least one 
parameter in the same format as at least one parameter of one or both of the invoked commands. 
15 [021 1] The command may be adapted to invoke a command (preferably for setting the transfer speed) as aforesaid, 
with a parameter equivalent to zero speed. This command is preferably adapted to stop or pause playback of an audio/ 
visual bit stream, and may itself correspond to or be invoked by a 'pause' or a 'stop' command. The invoked command 
may also cause the display of the audio/visual bit stream to be ceased. 

[0212] The command may alternatively be adapted to invoke a command (preferably for setting the transfer speed) 
20 as aforesaid, with a parameter equivalent to a greater than normal playback speed. Preferably the command is adapted 
to fast-forward an audio/visual bit stream, and may itself correspond to or be invoked by a 'fast-fonward' command. 
Furthermore, the command may be adapted to further invoke the command with a different parameter, for example to 
cause the bit stream to be reproduced faster the longer a 'fast-forward' button is depressed. 

[0213] The command may be adapted to invoke a command (preferably for setting the transfer speed) as aforesaid, 
25 with a parameter equivalent to a less than normal transfer speed. This command may be adapted to play in slow motion 
an audio/visual bit stream, and may itself correspond to or be invoked by a 'slow motion' command. 
[021 4] The command may instead or additionally be adapted to invoke a command (preferably for setting the transfer 
speed) as aforesaid, with a parameter equivalent to a negative playback speed. Preferably this command is adapted 
to play in reverse an audio/visual bit stream, and may itself correspond to or be invoked by a 'rewind' command. 
30 [0215] Furthermore, the command may be adapted to invoke a command (preferably for setting the transfer speed) 
as aforesaid, with a parameter equivalent to a normal playback speed. Preferably this command is adapted to resume 
playback of an audio/visual bit stream, and may itself correspond to or be invoked by a 'play', 'pause' or 'un-pause' 
command. 

[0216] The command may be adapted to invoke a command (preferably for setting the position of reproduction) as 
35 aforesaid, with a parameter equivalent to the location. Preferably this command is adapted to jump to a location in the 
audio/visual bit stream, and may itself correspond to or be invoked by a 'next chapter up', 'previous chapter', 'play', 
'next index', or 'previous index' command. 

[0217] The command may be adapted to cause the or a further audio/visual bit stream to be stored. Thus flexibility 
can be achieved by combining commands to reproduce a bit stream with the ability to store (preferably to record) the 
40 or a further bit stream. 

[0218] In a related aspect of the invention, there is provided acommand for controlling the transfer of an audio/visual 
bit stream, the command adapted to invoke at least one command as aforesaid (including, particularly, the commands 
which invoke further commands). 

[0219] Despite providing up to three levels of abstraction or more, this has been found pursuant to the present in- 

45 vention to provide the advantage of further computational simplicity. 

[0220] In particular, if the command corresponds to a user-selectable audio/visual control operation, each layer of 
commands can itself be relatively simple, and have a relatively simple interface with the layers above and below, and 
yet cause sophisticated low-level actions to occur in response to a single high-level user (or other) request. 
[0221] In a further aspect of the invention, there is provided a method of controlling the transfer of an audio/visual 

50 bitstream, comprising comparing a command as described herein to a control criterion, and generating a further com- 
mand in dependence upon whether the command matches the control criterion. 

[0222] Thus, invalid or undesired commands or sequences of commands may be amended, or default commands 
may be substituted in their place. 

[0223] Preferably, the further command is compared to the control criterion, and the further command is then amend- 
55 ed in dependence upon whether it matches the control criterion. 

[0224] The comparison between the further command and the control criterion, and amendment of the further com- 
mand may be repeated, either up to a maximum number of repetitions or indefinitely, until a further command is gen- 
erated which matches the control criteria. 
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[0225] Preferably, the control criterion is dependent upon a characteristic of the transfer of the audio/visual bitstream, 
preferably of the transfer occurring at the time of receipt of the command. 

[0226] Thus, greater control over the transfer of an audio/visual bitstream may be obtained upon receipt of sequences 
of commands, or upon receipt of commands which specify operations which are relative to a current characteristice of 
5 the transfer of the audio/visual bitstream. 

[0227] For instance certain sequences of commands, or operations on a bitstream, which are not allowed or which 
are undesirable may be detected and replaced. 

[0228] For instance it may not be allowed to jump to a point in the bitstream and then fast forward, and a command 
to fast forward may be replaced by a command to play if it is received immediately after a command to jump to a point 
10 in the bitstream 

[0229] Other commands may be relative to a current characteristic of the transfer of the audio/visual bitstream. For 
instance, a command may specify jumping forward to a position relative to the current position. The acceptability of 
this command may be dependent both upon the command itself and the current position. 

[0230] Preferably, the characteristic of the transfer of the audio/visual bitstream is a transfer speed and or a position 
15 in the bitstream. 

[0231] Preferably, the control criterion is dependent upon conditional access and or parental control data. 

[0232] In a further related aspect of the invention, there is provided an operating system, comprising at least one 

command as aforesaid. 

[0233] In another aspect of the invention, there is provided a receiver/decoder, comprising at least one command 
20 as aforesaid. 

[0234] In a yet further aspect of the invention, there is provided a receiver/decoder, adapted to invoke at least one 
command as aforesaid. 

[0235] In another aspect of the invention, there is provided a computer program product, comprising at least one 
command as aforesaid. 

25 [0236] In a further aspect of the invention, there is provided a computer readable medium, comprising a computer 

program product as aforesaid. 

[0237] In another aspect of the invention, there is provided a signal, tangibly embodying a computer program product 
as aforesaid. 

[0238] In a further aspect of the invention, there is provided apparatus for processing audio/visual data, comprising 
30 means (such as an input) for receiving audio/visual data, means (such as an output) for outputting audio/visual data, 
and means (such as a processor and associated memory) for executing at least one command as aforesaid. 
[0239] In a related aspect of the invention, there is provided apparatus for processing audio/visual data, comprising 
an input, an output, and a processor and associated memory, the processor being adapted to execute at least one 
command as aforesaid. 

35 [0240] In another aspect of the invention, there is provided an audio/visual processing device, comprising apparatus 
as aforesaid. 

[0241] In another aspect of the invention there is provided a broadcast system, comprising a receiver/decoder as 
aforesaid. 

[0242] In a further aspect of the invention there is provided a method of controlling the transfer of an audio/visual bit 
40 stream, comprising invoking a command to set the transfer speed, and passing the transfer speed as a parameter to 
the command. 

[0243] In another aspect of the invention there is provided a method of controlling the transfer of an audio/visual bit 
stream, comprising invoking a command to set a position from which reproduction is to take place, and passing the 
position as a parameter. 

45 [0244] The invention extends to methods and/or apparatus substantially as herein described with reference to the 
accompanying drawings. 

[0245] Any feature in one aspect of the invention may be applied to other aspects of the invention, in any appropriate 
combination. In particular, method aspects may be applied to apparatus aspects, and vice versa. 
[0246] Furthermore, features implemented in hardware may generally be implemented in software, and vice versa. 
50 Any reference to software and hardware features herein should be construed accordingly. 

[0247] Preferred features of the present invention will now be described, purely by way of example, with reference 
to the accompanying drawings, in which:- 

Figure 1 is an overview of a satellite digital television system; 
55 Figure 2 is an overview of a cable digital television system; 

Figure 3 is an overall system view, with the head-end shown in more detail; 
Figure 4 is a schematic of the component architecture of the receiver/decoder; 
Figure 5 is a diagram of the software architecture of the receiver/decoder; 
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Figure 6 is a diagram sliowing the top lialf of Figure 5 in more detail; 

Figure 7 is a diagram showing the bottom half of Figure 5 in more detail; 

Figure 8 is a diagram showing an alternative embodiment of the bottom half of Figure 5; 

Figure 9 is an overview of a content management and protection system; 
5 Figure 10 is an alternative arrangement of the content management and protection system; 

Figure 11 is an illustration of the software architecture of the content management and protection system; 

Figure 12 is an illustration of the recording of encrypted content to a mass storage device; 

Figure 13 is an illustration of the playback of encrypted content from a mass storage device; 

Figure 14 is a graph of bitrate versus time for a variable bitrate bitstream; 
10 Figure 15 is a schematic illustration of an MPEG-2 bitstream as a function of time; 

Figure 16 is a representation of data offsets, with corresponding bitstream time offsets, for a file containing a 

representation of a variable bitrate bitstream; 

Figure 1 7 is a schematic diagram showing the correspondence between points in a bitstream and points in a file 
comprising a representation of the bitstream. 
15 Figure 18 is a schematic diagram illustrating searching for a point in file using HDVR indices; 

Figure 19 is a schematic diagram illustrating a fast-forwarding operation comprising skipping between periodically 
spaced points in a bitstream; 

Figure 20 is a schematic diagram illustrating a fast-forwarding operation comprising skipping between periodically 
spaced points in a bitstream, and locating the closest following key frames to these periodically spaced points; 
20 Figure 21 is a graph of bitrate versus time for a variable bitrate bitstream, showing portions of a bitstream above 

a selected value; 

Figure 22 is an illustration of the interpolation of HDVR index points upon recording; 

Figure 23 is an illustration of a discrepancy between HDVR index information and inserted ECM sections; 

Figure 24 is a schematic diagram of part of a file, including an Hfmd section; 
25 Figure 25 is an overview of the flow of data between the CMPS and the HDVR in a preferred embodiment; 

Figure 26 is an illustration of the structure of a typical bit stream; 

Figure 27 is a diagram showing an estimation process as described herein; 

Figure 28 is a further diagram showing the estimation process; 

Figure 29 is a yet further diagram showing the estimation process; 
30 Figure 30 is a schematic of the bit stream recording process; 

Figure 31 is a schematic of the bit stream playback process; 

Figures 32 are an illustration of filtering a sinusoidal bit stream using a rapid filter; 

Figures 33 are an illustration of filtering a sinusoidal bit stream using an inertial filter; 

Figures 34 are an illustration of filtering a sinusoidal bit stream using a hybrid filter; 
35 Figures 35 are an illustration of filtering a sinusoidal bit stream using a static filter; 

Figures 36 are an illustration of filtering a constant bit rate bit stream using a hybrid filter; 

Figures 37 are an illustration of filtering a triangular bit stream using a hybrid filter; 

Figures 38 are an illustration of filtering a top hat bit stream using a hybrid filter; and 

Figures 39 are an illustration of filtering a peak in a bit stream using a hybrid filter. 
40 Figure 40 is a schematic of a personal video recorder system; 

Figure 41 is a schematic of three layers of commands for a personal video recorder system; 

Figure 42 is an illustration of a conventional fast-forward operation; 

Figure 43 is an illustration of a first alternative fast-forward operation; 

Figure 44 is an illustration of a further fast-fonward operation; 
45 Figure 45 is an illustration of a first rewind operation; 

Figure 46 is an illustration of a further rewind operation; 

Figure 47 is an illustration of a slow-play operation; and 

Figure 48 is an illustration of an alternative slow-play operation. 

50 System overview 

[0248] An overview of a digital television system 500 is shown in Figure 1 . As will be discussed below, the system 
500 comprises a broadcast centre 1000, a receiver/decoder 2000, a software/hardware architecture 3000 of the re- 
ceiver/decoder, an interactive system 4000, and a conditional access system 5000, as will all be discussed below. 
55 [0249] The system 500 includes a mostly conventional digital television system 502 that uses the known MPEG-2 
compression system to transmit compressed digital signals. In more detail, MPEG-2 compressor 1010 in a broadcast 
centre 1000 receives a digital signal stream (typically a stream of video signals). The compressor 1010 is connected 
by linkage 1020 to a multiplexer and scrambler 1030. 
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[0250] The multiplexer 1 030 receives a plurality of further input signals, assembles the transport stream and transmits 
compressed digital signals to a transmitter 1010 of the broadcast centre via linkage 1022, which can of course take a 
wide variety of forms including telecommunications links. The transmitter 510 transmits electromagnetic signals via 
uplink 514 towards a satellite transponder 520, where they are electronically processed and broadcast via notional 
5 downlink 51 6 to earth receiver 512, conventionally in the form of a dish owned or rented by the end user. Other transport 
channels for transmission of the data are of course possible, such as terrestrial broadcast, cable transmission, com- 
bined satellite/cable links, telephone networks etc. 

[0251 ] The signals received by receiver 51 2 are transmitted to an integrated receiver/decoder 2000 owned or rented 
by the end user and connected to the end user's television set 10000. The receiver/decoder 2000 decodes the com- 
10 pressed MPEG-2 signal into a television signal for the television set 1 0000. Although a separate receiver/decoder is 
shown in Figure 1 , the receiver/decoder may also be part of an integrated digital television. As used herein, the term 
"receiver/decoder" includes a separate receiver/decoder, such as a set-top box, and a television having a receiver/ 
decoder integrated therewith. 

[0252] In the receiver/decoder 2000 a hard disk 21 00 is provided, on which audiovisual and other data can be stored. 
15 This allows advanced recording and playback facilities for programmes received by the receiver/decoder, and also 
allows large amounts of other types of data, such as electronic programme guide data, to be stored in the receiver/ 
decoder. 

[0253] A content management and protection system (CMPS) 2300 (not shown) in the receiver/decoder provides 
the ability securely and flexibly to control the recording and playback of data on the hard disk 2100 (or other storage 
20 device). 

[0254] In a multichannel system, the multiplexer 1030 handles audio and video information received from a number 
of parallel sources and interacts with the transmitter 510 to broadcast the information along a corresponding number 

of channels. In addition to audiovisual information, messages or applications or any other sort of digital data may be 
introduced in some or all of these channels interlaced with the transmitted digital audio and video information. 
25 [0255] An interactive system 4000 is connected to the multiplexer 1 030 and the receiver/decoder 2000, and is located 
partly in the broadcast centre and partly in the receiver/decoder. It enables the end user to interact with various appli- 
cations via a back channel 570. The back channel may be, for example a Public Switched Telephone Network (PSTN) 
channel (for example, a modemmed back channel) or an Out of Band (OOB) channel. 

[0256] A conditional access system 5000, also connected to the multiplexer 1030 and the receiver/decoder 2000 

30 and again located partly in the broadcast centre and partly in the receiver/decoder, enables the end user to access 
digital television broadcasts from one or more broadcast suppliers. A smartcard, capable of deciphering messages 
relating to commercial offers (that is, one or several television programmes sold by the broadcast supplier), can be 
inserted into the receiver/decoder 2000. Using the receiver/decoder 2000 and smartcard, the end user may purchase 
commercial offers in either a subscription mode or a pay-per-view mode. Typically this is achieved using the back 

35 channel 570 which is used by the interactive system 4000. 

[0257] As mentioned above, programmes transmitted by the system are scrambled at the multiplexer 1030, the 
conditions and encryption keys applied to a given transmission being determined by the access control system 5000. 
Transmission of scrambled data in this way is well known in the field of pay TV systems. Typically, scrambled data is 
transmitted together with a control word for descrambling of the data, the control word itself being encrypted by a so- 

40 called exploitation key and transmitted in encrypted form. 

[0258] The scrambled data and encrypted control word are then received by the receiver/decoder 2000 having access 
to an equivalent to the exploitation key stored on a smartcard inserted in the receiver/decoder to decrypt the encrypted 
control word and thereafter descramble the transmitted data. A paid-up subscriber will receive, for example, in a broad- 
cast monthly EMM (Entitlement Management Message) the exploitation key necessary to decrypt the encrypted control 

45 word so as to permit viewing of the transmission. 

[0259] Figure 2 illustrates an alternative embodiment of a digital television system 504, utilising a cable network as 
the broadcast medium for the compressed digital signals. In this figure, like parts are indicated with like numerals. 
[0260] The satellite transponder and transmitting and receiving stations are replaced by a cable network 550. Addi- 
tionally, in this particular embodiment, the modemmed back channel between the receiver/decoder 2000 and the in- 

50 teractive system 4000 and conditional access system 5000 is removed, replaced by linkages 554, 556 between the 
cable network 550 and the conditional access system 5000 and interactive system 4000 respectively. The receiver/ 
decoder 2000 thus communicates with the other systems via the cable network 550, utilising a cable modem or other 
means to allow it to send and receive data via the same link as it receives data from the broadcast centre. 
[0261] The cable network 550 may be any form of wide area network (WAN), such as a dedicated connection, the 

55 internet, local cable distribution network, wireless connection, or any combination of the above. In the present embod- 
iment, the hybrid fibre coax (HFC) network is used. It is appreciated that the various means of communication between 
the receiver/decoder 2000 and the other components of the television system are interchangeable. 
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Conditional access system 

[0262] With reference to Figure 3, in overview the conditional access system 5000 includes a Subscriber Authoriza- 
tion System (SAS) 5200. The SAS 5200 is connected to one or more Subscriber Management Systems (SMS) 1100, 

5 one SMS for each broadcast supplier, by a link 1044, which may be a TCP-IP link or other type of link. Alternatively, 
one SMS could be shared between two commercial operators, or one operator could use two SMSs, and so on. 
[0263] First encrypting units in the form of ciphering units 51 00 utilising "mother" smartcards 51 1 0 are connected to 
the SAS by linkage 1 042. Second encrypting units again in the form of ciphering units 51 02 utilising mother smartcards 
51 1 2 are connected to the multiplexer 1 030 by linkage 1 040. The receiver/decoder 2000 receives a "daughter" smart- 

10 card 5500. The receiver/decoder is connected directly to the SAS 5200 via communications servers 1200 and the 
modemmed back channel 570. The SAS sends amongst other things subscription rights to the daughter smartcard on 
request. 

[0264] I n variants of the preferred embodiment, internet or cable connections either complement or replace the PSTN 
570 and communications servers 1200. 
15 [0265] The smartcards contain confidential information from one or more commercial operators. The "mother" smart- 
card encrypts different kinds of messages and the "daughter" smartcards decrypt the messages, if they have the rights 
to do so. 

[0266] With reference to Figure 3, in the broadcast centre, the digital video signal is first compressed (or bit rate 
reduced), using the MPEG-2 compressor 1010. This compressed signal is then transmitted to the multiplexer and 
20 scrambler 1 030 in order to be multiplexed with other data, such as other compressed data. 

[0267] The scrambler generates a control word used in the scrambling process and included in the MPEG-2 stream 
in the multiplexer 1 030. The control word is generated internally and enables the end user's integrated receiver/decoder 
2000 to descramble the programme. 

[0268] Access criteria, indicating how the programme is commercialised, are also added to the MPEG-2 stream. The 
25 programme may be commercialised in either one of a number of "subscription" modes and/or one of a number of "Pay 

Per View" (PPV) modes or events. In the subscription mode, the end user subscribes to one or more commercial offers, 
or "bouquets", thus getting the rights to watch every channel inside those bouquets. In the Pay Per View mode, the 
end user is provided with the capability to purchase events as he wishes. 

[0269] Both the control word and the access criteria are used to build an Entitlement Control Message (ECM); this 
30 is a message sent in relation with one scrambled program; the message contains a control word (which allows for the 
descrambling of the program) and the access criteria of the broadcast program. The access criteria and control word 
are transmitted to the second encrypting unit 5102 via the linkage 1040. In this unit, an ECM is generated, encrypted 
and transmitted on to the multiplexer and scrambler 1030. 

[0270] Each service broadcast by a broadcast supplier in a data stream comprises a number of distinct components; 
35 for example a television programme includes a video component, an audio component, a sub-title component and so 
on. Each of these components of a service is individually scrambled and encrypted for subsequent broadcast. In respect 
of each scrambled component of the service, a separate ECM is required. 

[0271] The multiplexer 1 030 receives electrical signals comprising encrypted EM Ms from the SAS 5200, encrypted 
ECMs from the second encrypting unit 51 02 and compressed programmes from the compressor 1 01 0. The multiplexer 
40 1030 scrambles the programmes and transmits the scrambled programmes, the encrypted EMMs and the encrypted 
ECMs as electric signals to broadcast system 600, which may be for example a satellite system as shown in Figure 
1, or other broadcast system. The receiver/decoder 2000 demultiplexes the signals to obtain scrambled programmes 
with encrypted EMMs and encrypted ECMs. 

[0272] The receiver/decoder receives the broadcast signal and extracts the MPEG-2 data stream. If a programme 
45 is scrambled, the receiver/decoder 2000 extracts the corresponding ECM from the MPEG-2 stream and passes the 

ECM to the "daughter" smartcard 5500 of the end user. This slots into a housing in the receiver/decoder 2000. The 

daughter smartcard 5500 controls whether the end user has the right to decrypt the ECM and to access the programme. 

If not, a negative status is passed to the receiver/decoder 2000 to indicate that the programme cannot be descrambled. 

If the end user does have the rights, the ECM is decrypted and the control word extracted. The decoder 2000 can then 
50 descramble the programme using this control word. The MPEG-2 stream is decompressed and translated into a video 

signal for onward transmission to television set 10000. 

[0273] If the programme is not scrambled, no ECM will have been transmitted with the MPEG-2 stream and the 
receiver/decoder 2000 decompresses the data and transforms the signal into a video signal for transmission to tele- 
vision set 10000. 

55 [0274] The subscriber management system (SMS) 1 1 00 includes a database 1 1 50 which manages, amongst others, 
all of the end user files, commercial offers (such as tariffs and promotions), subscriptions, PPV details, and data re- 
garding end user consumption and authorization. The SMS may be physically remote from the SAS. 
[0275] The SMS 1 1 00 transmits messages to the SAS 5200 which imply modifications to or creations of Entitlement 
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Management Messages (EMMs) to be transmitted to end users. The SMS 1100 also transmits messages to the SAS 
5200 which imply no modifications or creations of EMMs but imply only a change in an end user's state (relating to the 
authorization granted to the end user when ordering products or to the amount that the end user will be charged). The 
SAS 5200 also sends messages (typically requesting information such as cail-back information or billing information) 
5 to the SMS 1100, so that it will be apparent that communication between the two is two-way. 

Receiver/decoder 

[0276] Referring to Figure 4, the various elements of receiver/decoder 2000 will now be described in terms of func- 
10 tional blocks. 

[0277] The receiver/decoder 2000, which may be, for example, a digital set-top box (DSTB), comprises a central 
host processor 2002 and a digital TV coprocessor 2004, both having associated memory elements (not shown) and 
joined by a coprocessor bus 2006. The coprocessor 2004 is adapted to receive input data from a USB interface 2070, 
a serial interface 2072, a parallel interface (not shown), a modem 2074 (connected to the modem back channel 570 

15 of Fig. 1), and switch contacts on the front panel 2054 of the decoder. 

[0278] The receiver/decoder is additionally adapted to receive inputs from an infra-red remote control 2080 (and 
optionally from other wireless peripherals 2082 such as Bluetooth-enabled devices) and also possesses two smartcard 
readers 2050,2052 adapted to read bank and subscription smartcards 2060, 2062 respectively. The subscription smart- 
card reader 2052 engages with an inserted subscription card 2062 and with a conditional access unit (not shown) to 

20 supply the necessary control word to a demultiplexer/descrambler/remultiplexer unit 2010 to enable the encrypted 
broadcast signal to be descrambled. The decoder also includes a conventional tuner 2016 and demodulator 2012 to 
receive and demodulate the satellite transmission before being filtered and demultiplexed by the de modulate r/descram- 
bler unit 201 0. A second tuner 201 8 and second demodulator 201 4 are also provided, to allow, amongst other things, 
a second channel to be received and decoded in parallel with the first. 

25 [0279] A hard disk 21 00 is also provided, allowing storage of programme and application data received and generated 
by the receiver/decoder. In conjunction with the two tuners 201 6, 201 8, two demodulators 201 2,201 4, the descrambler/ 
demultiplexer/remultiplexer 201 0, and the data decoder 2024 and audio decoder 2026, advanced recording and play- 
back features are provided, allowing simultaneous recordings of one or more programmes while a further programme 
is being viewed, and more general transfers to and from the hard disk to and from the display devices and/or inputs 

30 and outputs, all occurring in parallel. 

[0280] The audio output 2038 and video output 2040 in the receiver/decoder are fed by the PCM mixer 2030 and 
audio DAC 2034, and the M PEG video decoder 2028, graphic engine 2032 and PAL/SECAM encoder 2036 respectively. 
Alternative or complementary outputs may of course be provided. 

[0281] As used in this description, an application is preferably a piece of computer code for controlling high level 
35 functions of preferably the receiver/decoder 2000. For example, when the end user positions the focus of remote control 
2080 on a button object seen on the screen of the television set (not shown) and presses a validation key, the instruction 
sequence associated with the button is run. Applications and the associated middleware are executed by the host 
processor 2002, with remote procedure calls (RPCs) being made to the digital TV coprocessor 2004 across the co- 
processor bus 2006 as and when required. 
40 [0282] An interactive application proposes menus and executes commands at the request of the end user and pro- 
vides data related to the purpose of the application. Applications may be either resident applications, that is, stored in 
the ROM (or FLASH or other non-volatile memory) of the receiver/decoder 2000, or broadcast and downloaded into 
the RAM, FLASH memory or hard disk of the receiver/decoder 2000. 

[0283] Applications are stored in memory locations in the receiver/decoder 2000 and represented as resource files. 
45 The resource files comprise graphic object description unit files, variables block unit files, instruction sequence files, 
application files and data files. 

[0284] The receiver/decoder contains memory (not shown) divided into at least one RAM volume, a FLASH volume 
and at least one ROM volume, but this physical organization is distinct from the logical organization. The memory may 
further be divided into memory volumes associated with the various interfaces. From one point of view, the memory 
50 can be regarded as part of the hardware; from another point of view, the memory can be regarded as supporting or 
containing the whole of the system shown apart from the hardware. 

Architecture of receiver/decoder 

55 [0285] With reference to Figure 5, the software/hardware architecture 3000 of the receiver/decoder contains five 
software layers, organized so that the software can be implemented in any receiver/decoder and with any operating 
system. The various software layers are application layer 3100, application programming interface (API) layer 3300, 
virtual machine layer 3500, device interface layer 3700 (often abbreviated just to 'device layer') and system software/ 



18 



EP 1 286 349 A1 



hardware layer 3900. 

[0286] The application layer 3100 encompasses applications 3120 that are either resident in or downloaded to the 
receiver/decoder. They may be interactive applications used by customers, written in, for example, Java, HTML, MH EG- 
5 or other languages, or they may be applications used by the receiver/decoder for other purposes, for example for 
running such interactive applications. This layer is based on a set of open Application Programming Interfaces (APIs) 
provided by the Virtual Machine layer. This system allows applications to be downloaded to the hard disk, flash memory 
or RAM memory in the receiver/decoder on-the-fly or on demand. The application code can be transmitted in com- 
pressed or uncompressed format using protocols such as Data Storage Media Command and Control (DSMCC), Net- 
work File Server (NFS) or other protocols. 

[0287] The API layer 3300 provides high-level utilities for interactive application development. It includes several 
packages that make up this high-level API. The packages provide all the functionality necessary to run interactive 
applications. The packages are accessible by the applications. 

[0288] In a preferred embodiment the API is adapted for applications written in the Java, PanTalk or such similar 
programming languages. Furthermore, it can facilitate the interpretation of HTML and other formats, such as MHEG- 
5. Besides these features, it also includes other packages and service modules that are detachable and extensible as 
requirements dictate. 

[0289] The virtual machine layer 3500 is composed of language interpreters and various modules and systems. This 
layer, managed by a kernel 3650 (not shown), consists of everything necessary to receive and execute interactive 
applications in the receiver/decoder. 

[0290] The device interface layer 3700 includes a Device Manager and software devices (generally referred to herein 
as just 'devices'). Devices are software modules which consist of the logical resources necessary for management of 
external events and physical interfaces. The device interface layer, under the control of the Device Manager, manages 

communication channels between drivers and applications and provides enhanced error exception checking. Some 
examples of managed (hardware) devices are: card readers 3722 (not shown), modems 3730 (not shown), network 
3732 (not shown), PCMCIA (Personal Computer Memory Card International Association), LED display and so on. 
Programmers do not have to deal with this layer directly, since the API layer controls the devices from above. 
[0291] The system software/hardware layer 3900 is provided by the manufacturer of the receiver/decoder. Because 
of the modularity of the system and because services supplied by the higher-level operating system (such as event 
scheduling and memory management) are part of the virtual machine and kernel, the higher layers are not tied to a 
particular real-time operating system (RTOS) or to a particular processor. 

[0292] Typically the virtual machine layer 3500, occasionally in combination with the device interface layer 3700 and/ 
or API 3300, is referred to as the 'middleware' of the receiver/decoder. 

[0293] With reference to Figure 6 the software architecture of the receiver/decoder 3000 corresponding to the top 
half of Figure 5 (comprising the application layer 3100, API layer 3300 and virtual machine layer 3500) will now be 
described in more detail. 

[0294] Interactive applications are applications that the user interacts with, for example, to obtain products and serv- 
ices, such as electronic program guides, telebanking applications and games. 

[0295] There are two types of application in the application layer 3100, plus the Application Manager 3110. There 

are interactive applications such as a Web Browser 3130 which can be added at any time as long as they conform to 
the API 3300, and there are resident applications which manage and support the interactive applications. The resident 
applications are substantially permanent and include the following: 

Boot. The Boot application 3142 is the first application launched when the receiver/decoder is powered on. The 

Boot application first starts the Application Manager 3110, and then starts the "Manager" software modules in the 
virtual machine 3500, such as the Memory Manager 3544 and the Event Manager 3546. 

Application Manager. The Application Manager 3110 manages the interactive applications that are run in the re- 
ceiver/decoder, that is, it starts, stops, suspends, resumes, handles events and deals with communication between 
applications. It allows multiple applications to run at once, and thus is involved in the allocation of resources among 
them. This application is completely transparent to the user. 

Setup. The purpose of the SetUp application 3144 is to configure the receiver/decoder, primarily the first time it 
is used. It performs actions such as scanning for TV channels, setting the date and time, establishing user pref- 
erences, and so on. However, the SetUp application can be used at any time by the user to change the receiver/ 
decoder configuration. 

Zapping. The Zapping application 3146 is used to change channels using the Program-up, Program-down and 
numeric keys. When another form of zapping is used, for example, through a banner (pilot) application, the Zapping 
application is stopped. 

Callback. The Callback application 31 48 is used to extract the values of various parameters stored in the receiver/ 
decoder memory and return these values to the commercial operator via modemmed back channel 1070 (not 
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shown), or by other means. 

[0296] Other applications in the application layer 3100 include a program guide application 3132, a pay-per-view 
application 3134, a banner (pilot) application 3136, a home banking application 3138, a software download application 
3140 and a PVR (personal video recorder) application 3154 (see below). 

[0297] As noted above, the Application Programming Interface (API) layer 3300 contains several packages. These 
include basic system packages 331 0, used, for example, to access basic features of the virtual machine, DAVIC pack- 
ages 3320, and proprietary packages 3330, used to access features of the software architecture unique to the principal 
software vendor. 

[0298] Considered in more detail, the virtual machine 3500 includes the following: 

Language Interpreters 3510. Different interpreters can be installed to conform to the type of applications to be 
read. These include Java interpreters 3512, PanTalk interpreters 3514, HTML interpreters 3516, MHEG-5 inter- 
preters 3518 and others. 

Service Information (SI) Engine. The SI Engine 3540 loads and monitors common Digital Video Broadcasting 
(DVB) or Program System Information Protocol (PSIP) tables and puts them into a cache. It allows access to these 
tables by applications which need the data contained in them. 

Scheduler 3542. This module allows for pre-emptive, multithreaded scheduling with each thread having its own 
event queue. 

Memory Manager 3544. This module manages the access to memory. It also automatically compresses data in 
memory when necessary and performs automatic garbage collection. 

Event Manager 3546. This module allows events to be triggered according to priority. It manages timer and event 
grabbing and allows applications to send events to each other. 

Dynamic Linker 3548. This module allows the resolution of addresses arising from native Java functions, loads 
native methods from a Java class downloaded into RAM and resolves calls from downloaded native codes towards 

ROM. 

Graphics System 3550. This system is object-orientated and optimized. It includes graphic window and object 

management as well as a vectorial font engine with multi-language support. 

Class Manager 3552. This module loads classes and resolves any class referencing problems. 

File System 3554. This module is compact and optimized to manage a hierarchical file system with multiple ROM, 

flash, RAM and DSMCC volumes. Flash integrity is guaranteed against any incidents. 

Security Manager 3556. This module authenticates applications and controls the access of applications to sensitive 
memory and other zones of the set-top box. 

Downloader 3558. This module uses automatic data loading from a remote DSMCC carousel or through the NFS 
protocol, with downloaded files accessed in the same way as resident ones. Memory clear-up, compression and 
authentication are also provided. 

[0299] Furthermore, the DAVIC resource notification model is supported so that client resources are efficiently man- 
aged. 

[0300] A kernel 3650 manages the various different processes running in the virtual machine 3500 and device inter- 
face layer 3700 (not shown). For efficiency and reliability reasons, the kernel implements relevant parts of the POSIX 
standard for operating systems. 

[0301] Undercontrolof the kernel, the virtual machine (running Java and Pantalk applications) runs in its own thread, 
separate to other 'server' elements of the operating system, such as the mass storage server 3850 (not shown). Cor- 
responding provisions, such as requiring Thread IDs to be passed as parameters in system calls, are also made in the 
API layer 3300 to allow the applications 3120 to benefit from the multithreaded environment. 

[0302] By providing multiple threads, more stability can be achieved. For example, if the virtual machine 3500 ceases 
to operate for some reason, by suffering a crash or being blocked for a long time by an application trying to access a 
device, other time-critical parts of the system, such as the hard disk server, can continue to operate. 
[0303] As well as the virtual machine 3500 and kernel 3650, a hard disk video recorder (HDVR) module 3850 is 
provided for handling the recording and playback functions of the hard disk 2210 or other attached mass storage 
component. The server comprises two separate threads 3854,3856 handling recording, one thread 3858 for handling 
playback, and a file system library 3852 for interfacing with the mass storage components. 

[0304] An appropriate one of the threads 3854, 3856, 3858 in the hard disk video recorder (HDVR) 3850 receives 
commands (such as a command to start recording a particular programme) from clients such as the personal video 
recorder (PVR) application 3154, in response to the user pressing a 'record' button, for example. 
[0305] In turn, the thread in question then interacts with the service device 3736 (shown in Figure 7) to set up and 
synchronise the parts of the receiver/decoder handling the bitstream to be recorded or played back. In parallel, the 
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thread also interacts with the file system library 3852 to coordinate the recording or playback operation at appropriate 
places on the hard disk 221 0 (not shown). 

[0306] The file system library 3852 then sends commands to the mass storage device 3728 (also shown in Figure 
7) which tell the mass storage device 3728 which sub-transport stream (STS) to transfer (via a FIFO buffer), and on 

5 which hard disk target the stream should be stored. Allocation of clusters on the hard disk and general file management 
is carried out by the file system library 3852, the mass storage device itself being concerned with lower level operations. 
[0307] The service device 3736 mentioned above is unique amongst the devices in that it does not relate to a physical 
component of the receiver/decoder. It instead provides a high level interface which groups together in a single 'instance' 
the various sets of tuner, demultiplexer, remultiplexer and hard disk devices in the receiver/decoder, freeing higher 

10 level processes from the difficulties of coordinating the various sub-devices. 

[0308] With reference to Figure 7 the software architecture of the receiver/decoder 3000 corresponding to the bottom 
half of Figure 5 (comprising the device interface layer 3700 and the system software and hardware layer 3900) will 
now be described in more detail. 

[0309] Further devices provided in the device layer include the conditional access device 3720, tuner devices 3724 
15 corresponding to the two (or potentially more) tuners 201 6, 201 8 of Figure 4, the video device 3734, the I/O port device 
3726, and the service device 3736 and mass storage device 3728 mentioned above. 

[0310] In broad terms, a device can be regarded as defining a logical interface, so that two different devices may be 
coupled to a common physical port. Certain devices may communicate among themselves, and all devices also operate 
under the control of the kernel 3650. 

20 [0311] Before using the services of any device, a program (such as an application instruction sequence) has to be 
declared as a "client", that is, a logical access-way to the device or the device manager 371 0. The manager gives the 
client a client number which is referred to in all accesses to the device. A device can have several clients, the number 
of clients for each device being specified depending on the type of device. A client is introduced to the device by a 
procedure "Device: Open Channel". This procedure assigns a client number to the client. A client can be taken out of 

25 the device manager 371 0 client list by a procedure "Device: Close Channel". 

[0312] The access to devices provided by the device manager 3710 can be either synchronous or asynchronous. 
For synchronous access, a procedure "Device: Call" is used. This is a means of accessing data which is immediately 
available or a functionality which does not involve waiting for the desired response. For asynchronous access, a pro- 
cedure "Device: I/O" is used. This is a means of accessing data which involves waiting for a response, for example 

30 scanning tuner frequencies to find a multiplex or getting back a table from the MPEG stream. When the requested 
result is available, an event is put in the queue of the engine to signal its arrival. A further procedure "Device: Event" 
provides a means of managing unexpected events. 

[0313] In a second embodiment of the receiver/decoder, the lower half of the architecture of the receiver/decoder is 
replaced by the layers shown in Figure 8. 
35 [0314] In this embodiment, an extended device layer interface (EDLI) 3600 is provided between the virtual machine 
3500 (not shown) and the device interface layer 3700, and an abstraction device interface 3800 is provided between 
the device interface layer 3700 and the system software/hardware layer 3900. Otherwise, like parts are indicated with 
like reference numerals. 

[0315] The extended device layer interface (EDLI) 3600 provides a dedicated interface between the virtual machine 
40 3500 and the device interface layer 3700 and generally provides multithreading support to the device interface layer. 
Functions of the EDLI include routing asynchronous events to the appropriate thread in the middleware (since the 
device interface layer need not itself support multithreading) and routing messages between threads. 
[0316] The abstraction device interface 3800 provides a further interface between the device interface layer 3700 
and the device drivers 391 0 in the system software/hardware layer 3900. By providing such an interface, the large and 
45 complex device layer 3700 can be made hardware independent to a greater degree. 

Content management and protection system (CMPS) 

[0317] With reference to Figure 9, the content management and protection system (CMPS) 2300 mentioned above 
50 is distributed between the broadcast centre 1 000 and the receiver/decoder 2000. The receiver/decoder component of 
the CMPS is provided in the form of a smartcard with associated smartcard reader, but in variants of the preferred 
embodiment is implemented solely in software or in other forms of hardware. The CMPS can ensure that only authorized 
users can record and playback content, in accordance with predefined usage rules. 

[0318] An important part of the content management and protection system is the special Usage Rules Message 
55 (URM) which contains content management information relating to a given programme or transmission and is trans- 
mitted before such a programme or transmission. In essence, the Usage Rules Messages impose usage constraints 
on the playback and reproduction of the content, and can be directed only to specific portions of the content, such as 
separate 'chapters' within a programme, or to the content as a whole. Typical usage rules include restrictions on time- 



21 



EP 1 286 349 A1 



shifting, fast-forwarding, number of times a recording can be played bacl<, and available reproduction modes. Another 
important feature, which will be described in more detail below, is that URMs relating to a given programme may be 
sent independently (from different locations and at different times) from the corresponding content or conditional access 
information. 

5 [0319] A second class of message, the CMPS Entitlement Management Message (CMPS EMM, or CMP_EMM), is 
provided to transmit access rights to the CMPS. The CMPS EMM is equivalent to the conditional access entitlement 
management message (EMM, or CAS_EMM) referred to elsewhere, but the transmitted access rights relate to the 
local storage of programme data rather than broadcast programme data, as with the 'conventional' EMM. 
[0320] In the preferred embodiment, shown in Figure 9, the multiplexer and scrambler 1030 receives the CMPS 

10 EMMs 5614 and URMs 5612, multiplexes them with the bitstream containing the unscrambled content (programme 
data) 810 and broadcasts the resulting scrambled content 800 via the broadcast system 600. The receiver/decoder 
then receives the scrambled content 800, and removes and passes the CMPS EMMs and URMs to the CMPS 2300 
and conditional access system 5000 as appropriate. 

[0321] The URMs are encrypted with a URM exploitation key, which in a variant of the preferred embodiment is the 
15 same as the ECM exploitation key. An equivalent of the URM exploitation key is maintained in the receiver/decoder 
CMPS smartcard (not shown) to allow the URMs to be decrypted. 

[0322] As mentioned above, access rights which allow a user to record and/or playback using the receiver/decoder 
are provided in the form of CMPS Entitlement Management Messages (CMPS EMM or CMP_EMM); CMPS EMMs 
can have the same structure as conventional EMMs, but are generally more key-oriented - a CMP_EMM typically 

20 embeds a key associated with a content or service. Rights to playback recorded content are granted in return for one- 
off payments (impulse purchases) or subscriptions. Various levels of access rights can also be granted in relation to 
any content, whereby a user could, for example, pay a first fee in exchange for the rights to replay content once, or 
pay a second, higher, fee in return for unlimited replays. CMP_EMMs are typically stored in the receiver/decoder CMPS 
smartcard, but may be stored elsewhere, such as in a conditional access smartcard, for example. 

25 [0323] In the preferred embodiment, rights to replay a recording can either be obtained after the recording is made 
(the 'pay-per-view' model), or prior to the recording (the 'subscription' model). In the former case, after recording the 
content, the user instructs the conditional access system that he wishes to obtain the rights to playback the content. 
If the instruction is authorised by the subscription management system, the appropriate CMPS Entitlement Manage- 
ment Message ("CMP_EMM") is then transmitted to the receiver/decoder via the bidirectional link. 

30 [0324] One of the many advantages provided by the CMPS system is that the access rights for recording and playing 
back programmes are entirely independent of the access rights for simply viewing the programmes, as in conventional 
systems. Thus, one could have the situation where one could view a programme but not record it and play it back, and 
conversely one could be unable to view a programme, but one could record it, obtain the necessary rights and then 
play it back. 

35 [0325] In a variant of the preferred embodiment particularly typical of an internet distribution model, shown in Figure 
10, the scrambled content ("CONTENT*"), CMPS EMM ("CMP_EMM") and URMs ("URM") are all delivered independ- 
ently to a receiver/decoder 2000, from a first party 1200, second party 1202 and third party 1204. The first, second or 
third party may be, for example, a multi access portal (MAP), and the scrambled content 1300, CMPS EMMs 5614 
and URMs 5612 may be delivered. Typically, a programme provider (the second party 1202) sends programme content 

40 ("CONTENT") to the multiplexer/scrambler, where the scrambled content 1300 (CONTENT*) is generated and then 
transmitted to the receiver/decoder 2000 in the usual fashion. 

[0326] With reference to Figure 11 , the implementation of the CMPS at the receiver/decoder 2000 will now be de- 
scribed. 

[0327] A CMPS server module 2200 is provided in the receiver/decoder middleware, and comprises a CMPS server 
45 API, a CMPS core and a link layer. The CMPS server module 2200 interfaces with a CMPS library 3362, and interfaces 
indirectly with the HDVR controller 3350. The CMPS server module 2200 also interfaces with the MLOAD device 3438, 
the LCARD device 3440 (housing the conditional access smartcard), and the RCARD device 3442 (housing a CMPS 

smartcard). 

[0328] In operation, ECMs 5602 received in the programme data stream are isolated by the MLOAD device and then 
50 routed by the CMPS link layer to the conditional access smartcard. Control words 5600 derived from the ECMs are 
then routed to the CMPS smartcard, along with corresponding URMs 561 2 and CMPS EMMs 561 4 (which are preferably 
also received in the programme data stream, but may be received via other routes). The CMPS smartcard then com- 
bines and encrypts the three items of data to form content management messages 561 0 (CMMs) which are then passed 
to the CMPS core for further processing. In response to appropriate requests, the CMMs are then passed to the HDVR 
55 controller 3350 so that they can be stored on disk along with the corresponding content data. 

[0329] In the process of recording content to disk, illustrated in Figure 1 2, each ECM 5602 is passed to a decryption 
stage 5550 in the conditional access smartcard, where it is decrypted using a general exploitation key KG 5606. The 
decrypted control word 5600 then passes to an encryption stage 2202 in the CMPS smartcard, where, it is combined 
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into a content management message (CMM) with tine corresponding URIVl 5612 and CMPS ElVIIVI 5614, and then re- 
encrypted as a whole using a local exploitation key KL 5608. The CMM is then stored in a separate file 211 2 to the file 
2110 used to store the unaltered, scrambled content in the hard disk 2100. 

[0330] In the reverse process of playing back content from disk, illustrated In Figure 1 3, the scrambled content 1 300 
5 is read from the file 2110 on the hard disk 2100 and fed into the descrambler 2010. In parallel, CMMs are read from 
the separate file 2112 and fed into a decryption stage 2204 in the CMPS smartcard. The CMMs are decrypted with the 
local exploitation key 5608 and then split into the URM 5612, CMPS EMM 5614 and control word 5600. If the CMPS 
module decides that the user is entitled to view the material (on the basis of the URM and CMPS EMM), the control 
word 5600 is then sent to the descrambler 2010 at the appropriate time to allow the content to be descrambled. 

10 

INTERNAL FORMAT 

Variable bitrate bitstream transmissions 

^5 [0331] Transmissions received, processed and stored by the preferred embodiments are in the form of bitstreams, 
and the retrieval and processing of data from recorded bitstreams is dependent in part upon the characteristics of such 
bitstreams. The use of table of records, in particular HDVR and USER indices in particular embodiments, in such 
recordal and processing, particularly of files containing recordings of variable bitrate bitstreams, and the synchronisa- 
tion, storage and retrieval of encryption information related to such files is described later. At this point the general 

20 characteristics of variable bitrate bitstreams are discussed briefly. 

[0332] Figure 1 4 is a graph of bitrate versus time for a satellite TV transmission. 

[0333] In various embodiments, variable bitrate bitstreams similar to those illustrated in Figure 1 4 are received, trans- 
mitted and stored in or between computer devices, processors, A/D converters, televisions, HDVRs, or storage devices 
for instance hard disks, tapes, computer storage devices, CDS, or DVDs. Such variable bitrate bitstreams include data 
25 in a variety of compression formats, including MPEG-2, MPEG-4, MPS protected by different ciphering algorithms 
including DVB-CS, DES, 3DES, and contain video and or audio data, teletext information, subtitles, any other type of 
text information, computer data, or representations of such data. 

[0334] Figure 15 is an Illustration of an MPEG-2 data stream as a function of time, showing schematically the position 
of key frames known as Intraframes (l-frames) 4500 and 4502, and delta frames in the form of B-frames, for instance 

30 at 451 0, and P-frames, for instance at 451 2 within the bitstream. The key frames can independently be used to regen- 
erate a portion of audio/visual data, whereas the delta frames map changes from other frames and can be used to 
regenerate a portion of audiovisual data only in dependence upon such other frames. An interframe (P-frame) maps 
changes from the preceding frame, whereas a B-frame maps changes from either or both preceding and following 
frames. In MPEG-2 data streams, key frames are usually transmitted with a frequency of 2Hz. 

35 [0335] Upon reception, the bitstream is generally stored as a data file in a data storage device, unless it is played 
out or retransmitted immediately without being stored. A data file 6000, including the correspondence between time 
offset in a bitstream 6002 and data offset in the data file is shown in Figures 1 6 and 1 7. 
[0336] Further detail is now provided with respect to three general aspects of preferred embodiments:- 

40 - the generation and use of index tables in the retrieval and processing of stored bitstreams 

the estimation of position in a bitstream, and the synchronisation of conditional access information with the bit- 
stream 

command sets for controlling the transfer of a bitstream 

45 [0337] Beginning with the generation and use of index tables in the retrieval and processing of stored bitstreams, 
the structure and content of stored bitstreams, in the form of files stored by an HDVR, are first examined. 

Structure of HDVR files 

50 [0338] Looking at the structure of stored data in more detail, HDVR files comprise both management data (referred 
to in the following as hdvr_management_data) and content data (referred to in the following as hdvr_content_data). 
The management data and the content data are stored at the HDVR either as separate parts of the same file, or as 

separate files. 

[0339] The hdvr_content_data comprises a stored transport stream (STS), which is discussed in more detail below. 
55 Firstly, however, the hdvr_management_data is examined in more detail. 

[0340] The hdvr_management_data comprises CMMs as described above (typically in the form of a dedicated two 
dimensional table), and typically also comprises the following tables:- 
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Index table 
Chapter table 
Private PMT table 
Parental Control Data table 
5 - Maximum Values table 

General Information table 

[0341] The Maximum Values table allows the specification of the storage structure of all of the HDVR tables, apart 
from the Maximum Values table itself and the General Information table. 
10 [0342] In preferred embodiments, the HDVR management data always comprises : 

firstly, the General Information table 

secondly, the Maximum Values table 

thirdly, other HDVR tables, such as Private PMT tables, Chapter tables. 

15 

[0343] For each elementary part of the hdvr_fHe.management_data, there is a writing function and a playing function 
which each encapsulate a jump in the file and the operation to be executed. 

[0344] Each of the above tables is described in more detail below, but firstly the structure and content of the Index 
table, and its use in performing operations on recorded content is examined in more detail. 

20 

HDVR index table and operations performed by the HDVR on a recorded bitstream 

[0345] Further detail is now provided concerning the HDVR index table, comprising HDVR and USER indices, and 
operations performed by the HDVR on a recorded bitstream using the HDVR index table. 
25 [0346] The HDVR index table allows the mapping between at least one time offset (in seconds, divided into cryp- 
toperiods) in a bitstream and at least one file offset in an STS containing a representation of the bitstream. Typically, 

the bitstream is a variable bitrate bitstream, as described previously. 

[0347] The indices in the HDVR index table are separate from the CMM indices and have associated with them a 
CMM or cryptoperiod number, a time in seconds and a file offset number. Knowing the file offset number, the HDVR 
30 index table can be used to look up the file offset position with respect to a time in seconds or cryptoperiods, without 
the need for potentially time-consuming binary searching using dichotomical algorithms which falls down with a change 
in bit rate. The change in time is the time between samples. 

[0348] Processing recorded content, for instance searching for points in a file, or a corresponding bitstream, and 
"trick mode" operations such as fast forwarding, rewinding, and skipping make use of HDVR and USER indices stored 
35 in the HDVR index table. Generally, the HDVR indices are inserted automatically by the HDVR, and the USER indices 
are inserted upon command of a user. 

[0349] In preferred embodiments, as described above, the HDVR index table is stored in the 
hclvr_fHe_management_data part of a HDVR file. In variants of such preferred embodiments, an HDVR index table is 
stored in a separate file, or in other locations within an HDVR file. 
40 [0350] As described above, various other data is stored in the hdvr_fHe_management_data part of a HDVR file in 
preferred embodiments. In particular, the conditional access information is stored as a CMM table in 
hdvr_file_management_data, and entries in the index table are mapped to entries in the CMM table, so that data at 
points in an HDVR file indexed by the HDVR or USER indices may be decoded using corresponding entries in the 
CMM table. 

45 [0351] In preferred embodiments an HDVR index table is generated by an HDVR automatically during the recording 
of a programme. Alternatively, an HDVR index table, or a further such table, is generated upon command after recordal 
of a programme. 

HDVR indices 

50 

[0352] The HDVR indices are positioned at regular intervals by the HDVR and are used as play entry points in the 
recorded file (in the case of internal encryption). They correspond to the granularity of the play positioning. For each 
CMM family, corresponding to a recorded file or programme, each HDVR index therefore points to at least one appli- 
cable CMM, and its position in the file is identified by a block number (file granularity). 
55 [0353] In the case of multiple commercial offers relating to multiple recorded content, there may be a plurality of 
CMM sets for one entry point. For instance, a user can pay for a special language version with related audio data which 
is stored in the STS but which is ciphered with another CMM set. Therefore, in this instance at least two CMMs would 
be required for each index entry point. 
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[0354] In preferred embodiments, the HDVR indices are generated and stored in real time during the recordal of a 
programme. A recording comprises no more than MaxHdvrlndexNumber indices. 

[0355] The HDVR indices are generally positioned at periodic time offsets in the bitstream. In preferred embodiments, 
the bitstream comprises data compressed according to the MPEG-2 protocol and according to this protocol key frames, 
5 known as intraframes, are located every 0.5 seconds in the bitstream. As described above, such key frames may be 
used to regenerate a portion of audiovisual data, for instance a frame in a film, independently of other portions of data 
in the bitstream. The HDVR indices in such embodiments have time offsets which are distributed with a period of 0.5 
seconds, and the indices correspond to the beginning of each key frame. 

[0356] In variants of the preferred embodiments, the HDVR indices are positioned with time offsets with different 
10 periods, and in some variants such periods are varied both upon command of the user, and automatically by the HDVR. 

USER indices 

[0357] The USER indices are positioned by the client and are also play entry points. As mentioned above, the play 
15 granularity is the HDVR index, and in preferred embodiments the user indices are based on these HDVR indices. It is 
straightf onward to recover using the HDVR indices, the CIVIM applicable to the USER index by CIVIM family 
[0358] The USER indices are set at the time of recording of a programme or playback of a recorded programme. In 
particular embodiments the number of such USER indices is limited, and a recording comprises no more than MaxU- 
serlndexNumber indices. 

20 [0359] In preferred embodiments, the bitstream comprises MPEG-2, l\/IPEG-4 or MPS data, although in other em- 
bodiments the bitstream may comprises data in a variety of other compression formats. 

Bitstream operations using IHDVR and USER indices 

25 [0360] The HDVR and USER indices are used to perform a variety of operations on the STS. 

Searching 

[0361] For instance, as illustrated in Figure 18, the HDVR and USER indices are used to find preferred points in an 
30 HDVR file 6300, corresponding, for instance, to preferred time offsets in a corresponding bitstream. The closest point 
6310, or more usually the closest preceding point 6312, in the file to the preferred point 6314 is located in an Index 
table 631 6 of HDVR and USER indices, by the HDVR, and the file is searched from this point by the HDVR to find the 
preferred point. Generally, the searching is performed by decoding (for instance using corresponding entries in a CMM 
table) and reading data from the indexed point onward until the preferred point is found. In some variants indexed 
35 points correspond to preferred points, and in such variants a search is performed merely by jumping to the appropriate 
indexed point. 

[0362] In alternative embodiments, if a preferred point which is the subject of a search falls between points in the 
file referenced by two HDVR or USER indices, the file is searched from a point intermediate between the two indexed 
points. This intermediate point is located by linear interpolation between the two indexed points. In variants of such 
40 embodiments, the intermediate point is located by using other data interpolation techniques or by fitting indexed points 
to alternative functions, such as polynomial or exponential functions, or cubic spline functions. In such variants, further 
indexed points in addition to the two indexed points adjacent to the preferred point are used to locate the intermediate 
point. 

Trick mode operations 

[0363] In preferred embodiments, HDVR indices correspond to periodically spaced points in time in a bitstream. 
"Trick mode" operations, such as fast forwarding and rewinding, are performed by the HDVR, by locating, using the 
HDVR indices, decoding, and displaying data in a file corresponding to such periodically spaced points in time in a 
50 bitstream. 

[0364] The speed of, for instance, rewinding or fast forwarding is varied in preferred embodiments by varying the 

rate at which the stored bitstream is played back. Typically, not ail of the bitstream data is played back during a rewinding 
or fast fonwarding operation, but rather selected portions, usually equally spaced in time in the bitstream, are played 
back. The rate at which data is read from the file can be varied for any particular rewinding or fast forwarding speed 
55 by varying the proportion of data in the bitstream which is played back. In preferred embodiments, the speed of re- 
winding or fast fonwarding is varied upon command of a user. 

[0365] By way of example, a fast forwarding operation is illustrated in Figure 19. The HDVR locates using HDVR 
indices, decodes, and displays data at points in a file corresponding to equally spaced points in time 6400, 6404, 6408 
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and 641 2 in a bitstream. Points 6402, 6406, and 641 0 whicli also correspond to HDVR indices are skipped. In variants 
of the embodiment, the H DVR varies the speed of rewinding or fast-forwarding by varying the rate at which the selected 
points 6400, 6404, 6408, and 6412 are decoded and displayed, and by varying the points which are selected. 
[0366] In preferred embodiments, if the bitstream is an IVIPEG bitstream, the HDVR indices map to the beginning of 
key frames (l-frames in the case of MPEG-2), which can be used to regenerate portions of, in particular, audio/visual 
data independently of any other portion of data. Applying Figure 18 to these variants, the locations of key frames 
coincide with at least some of the HDVR indices' locations 6312. Fast forwarding and rewinding is performed rapidly 
by locating key frames in a file located at equally spaced time intervals or offsets in the corresponding bitstream by 
looking up the HDVR indices. 

[0367] In variants of the preferred embodiments, the HDVR indices, or USER indices, do not necessarily map directly 
to key frames. As illustrated in Figure 20, indices reference time offsets 6500, 6504, 6506, 6510, 6512, 6516, 6518, 
and 6522 in the bitstream, and corresponding data offsets in a file containing a representation of the bitstream. Key 
frames are located at time offsets 6502, 6508, 6514, and 6520 in the bitstream (and representations of these key 
frames are located at corresponding data offsets in the file), but the indices do not reference these time offsets. 
[0368] Figure 20 also illustrates a fast forwarding operation in such an embodiment. The HDVR locates, using the 
indices, points in the file corresponding to points 6500,6506,651 2 and 651 8 in the bitstream. Points 6504, 651 0, 651 6, 
and 6522 which are also referenced by HDVR indices are skipped. Upon location of the point in the file corresponding 
to 6500, the HDVR decodes the data in the file at this point, using the appropriate CMM from the CMM table, and then 
proceeds to decode the following data in the file, until it locates data representing the key frame at 6502 in the bitstream. 
The key frame is then displayed by a display device linked to the HDVR. The HDVR proceeds to locate points in the 
file corresponding to 6506,651 2 and 651 8, and to locate data representing key frame at 6508, 6514, and 6520. These 
key frame are displayed on the display device in sequence. 

[0369] In further variants, indices reference points in a bitstream, and corresponding points in a file, which coincide 
with the start of cryptoperiods. 

[0370] In a further embodiment, a representation of a bitstream is stored on a DVD with a table of indices mapping 

data offsets in the bitstream to data offsets in stored representation on the DVD. As with the HDVR embodiment, the 
indices correspond to periodically spaced points in time in the bitstream. In variants of this embodiment, USER indices 
are stored in the table of indices. The table of indices is read by a DVD player, or any device adapted to read DVDs. 

Performance of trick mode operations in dependence upon liardware cliaracteristics 

[0371] The maximum speed of operation of particular trick mode operations, such as fast forwarding or rewinding, 
is dependent upon the maximum frame rate supported by system hardware, and is in particular dependent upon read/ 
write hard disk access time, parsing demultiplexer bandwidth, and operating system scheduling accuracy 
[0372] In preferred embodiments, the HDVR supports any fast forwarding or rewinding speed in an allowed range, 
for instance between x1/128 and x128, despite any variation in hardware quality, by estimating the maximum frame 
rate allowable by particular hardware, and selecting points in the index table, and subsequently extracting frames 
corresponding to these points from the STS, in accordance with such maximum frame rate, and with the requested 
fast forwarding or rewinding speed. Typically, the maximum frame rate is determined by a read/write hard disk access 
time, a parsing demultiplexer bandwidth, or an operating system scheduling accuracy 

[0373] So, referring back to Figure 19, for hardware of given characteristics able to support a particular frame rate, 
and for a given rewinding or fast forwarding speed, the HDVR locates using HDVR indices, decodes, and displays 
data at points in a file corresponding to equally spaced points in time 6400, 6404, 6408 and 641 2 in a bitstream. Points 
6402, 6406, and 641 0 which also correspond to H DVR indices are skipped. However, in a variant (not shown) in which 
the hardware can only support a lesser frame rate, only data at points 6400 and 641 2 is located, decoded and displayed, 
and data at points 6404, 6402, 6406, 6408, and 6410 is skipped. The rewinding or fast forwarding speed is the same 
in both cases, as the time taken to display data between points 6400 and 6412 in the bitstream is the same, although 
the smoothness of the rewinding or fast forwarding may be degraded in the second case. 

[0374] In preferred embodiments, a processor assesses the characteristics of the system hardware and calculates 
the maximum frame rate dynamically. In variants of such embodiments, the processor also assesses the characteristics 
of a stored bitstream in calculating the maximum frame rate allowable. 

[0375] Alternatively, characteristics of the system hardware, and the maximum frame rate allowable, are pre-stored 
at the HDVR. In further variants, the rate at which data is read from a file during a fast fonwarding or rewinding operation 
is not varied, and in some such variants all such data is read. 

Automatic generation of index tables in dependence upon bitstream characteristics 

[0376] In preferred embodiments indices, such as USER indices and HDVR indices, are created or deleted auto- 
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matically in dependence upon analysis of cliaracteristics of bitstream data by a processor. For instance, in one variant 
such a processor included in an HDVR creates indices corresponding to portions of a bitstream where the bitrate is 
within a particular range of values. Such values can be set by operation of a user-defined algorithm. 
[0377] By way of example, in one variant, as illustrated in Figure 21 , indices are created at points where the bitrate 
rises above a particular value 6600, set by a user. The portions of the bitstreams commencing at these points may 
correspond, for instance, to an action sequence in a film. In further variants, the processor is programmable, and the 
dependency upon analysis of characteristics of bitstream data can be varied. 

[0378] In further variants, a processor analyses user actions and creates or deletes indices, including USER indices 
and HDVR indices, in dependence upon this analysis. The processor is programmable and this dependency can be 
varied. In one example of such dependency, more indices are created corresponding to points in a bitstream upon 
which a user is performing a large number of actions. 

[0379] In further variants, data is inserted upon the command of the user into a table, or into an associated table or 
file, and this data is associated with particular data offsets or associated time offsets referenced by USER indices, or 
HDVR indices. Such data includes comments to be displayed on a screen, and commands, such as television control 
commands, and in particular includes data which activates or deactivates a parental control mechanism. Such parental 
control mechanism is generally directed to particular chapters, but in certain variants it is also directed to cryptoperiods 
and pluralities of cryptoperiods, and user defined portions of a file. In some such variants a user can select particular 
scenes within a recorded film to which they wish to control access. 

Output data 

[0380] Generally, data located in an HDVR file using the HDVR and USER indices is decoded, for instance using a 
CMM table as described above, and decompressed, if it is subject to a compression protocol such as MPEG, and is 
output to a display device, generally a TV screen. However, in certain embodiments, such data can also be output to 
a mass storage device, or to a processor, with or without being decoded or decompressed. 

[0381] Further detail is now provided concerning the structure and generation of index tables, and the use of index 
tables in playing back encrypted content. 

[0382] HDVRandUSER indices are stored together in the same table referred to as an index table, lndex_Table(), 
as discussed above. 

[0383] The HDVR part of the index table is a one-dimensional array of temporally periodic successive HDVR index 

descriptors. 

[0384] Each HDVR index descriptor contains the following information :- 

a file offset (HdvrlndexAddress[1 ... MaxHdvrlndexNumberJ) (in numbers of blocks) in the content part, 
hdvr_file_content_data, of the HDVR file which defines the HDVR index position. The STS is divided into blocks, 
and the STS portion pointed to by the file offset corresponds to a time-date (measured from the beginning of the 
STS) that is proportional to the HDVR index position into the HDVR index descriptor array. The n^^ index maps to 
a point which corresponds to n x Hdvr_time_stamp secon6s having passed since the start of the STS; 
an array of CMM family indices (HdvrlndexCMM[1 ... MaxHdvrlndexNumber] [1 ... ComponentNumberJ) that define 
which CMM descriptors (CMM_ld} are required to decipher the portion of the STS pointed to by the particular 
HDVR index. For each of the ComponenfA/umibe/' components (video, audio, teletext) a reference to the CMM_id 
of the corresponding CMM_table is given for each index, facilitating trick modes during subsequent reading; 
the chapter identifier to which the HDVR index belongs; and 

the private PMT identifier (HdvrlndexPMTVersion[1... MaxHdvrlndexNumber) that is used to demultiplex correctly 
the STS portion pointed to by the HDVR index. 

[0385] The USER index part of the index table, of maximum size MaxUserlndexNumber, is a one-dimensional array 
of USER index descriptors. Note that USER indices are not sorted by time. Each USER Index (Userlndex[1 ...MaxU- 
serlndexNumber) is, as a matter of fact, a reference to a particular HDVR index, which corresponds to a particular STS 
play entry point. Each USER index contains the following information :- 

a status that defines whether the USER index is either enabled or disabled; and 

the HDVR index reference (Hdvrlndex_ld) corresponding to the time-date that a user wanted to bookmark (taking 
the origin as the beginning of the STS). Note that this information is relevant when the relevant status is enabled. 

Creation of Index tables 

[0386] The index table is constructed in two stages:- 
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the HDVR Index table is calculated by the hdvr_recorder upon recording of a file 

the User I ndex table is empty after the first recording ; it is only during reading a command is sent to the hdvrjDiayer 
to insert the User Index. 

Creation of an Hdvr Index table by hdvr_recorder 

[0387] The Hdvr Index table is calculated and updated upon each reading of the disc: 

the principle of calculation of the index points, HclvrlndexAddress[n], is based upon a linear interpolation between 
two readings of index position, as illustrated in Figure 22. 

The corresponding CMMs, ComponentNumber CMM_ld, are themselves calculated at the end of each reading. 

In scrutinising each CMM_table, one compares the position, HdvrlndexAddress, of the current index with the po- 
sition, in BlockNumbers, of the last CMM, identified by CMM_id, of each table. Two cases are possible :- 

either, HdvrlndexAddress > BlockNumber[CMM_number], which signifies that the index is actually that of the 
last CMM, in which case HdvrlndexCMM=CMM_number 

or, there exists a CMM_id in the CMM_table such that BlockNumber[CMM_id] < HdvrlndexAddress < Block- 
Number[CMM_ld+1l in which case HdvrlndexCMM=CMM_ld 

Note that the size of the file being a monotonically increasing function, the interpolation of an index will always give a 
position behind the writing pointer at all times. 

HdvrlndexPMTVerslon is a counter which increments its value each time the PMT table is modified. This number 
refers to a structure that links together all the information linking PIDs/Components. The value is updated for each 

index. 

Creation of the User Index table by the hdvr _player 

[0388] The User Index table is filled upon reading of the file. The user sends an insertion of index command, via an 
Application, and it falls to the HDVR to place appropriately the associated index point, Userlndex. In taking into account 
the User to Application to HDVR reaction times, one can simplify the positioning of the index by deciding to calculate 
it from an entry in the Hdi/'/'/nc/exsub-table; this is justified when the time spacing of index points (HdvrlndexTimeStamp) 
is sufficiently small (1s or 1.5s). Hdvr rounds the time/date of the sending of the insertion of the index to the closest 
multiple of HdvrlndexTimeStamp and then fills the Userlndex field indicating the identity of the corresponding Hdvr 
index point, Hdvrlndex_ld. 

Use of index tables 

[0389] The role of the index table is to provide entry points for reading of a file, HdvrlndexAddress, as well as infor- 
mation relative to the local decryption, HdvrlndexCMM. 
[0390] Two methods exist: 

use of the index table alone 

use jointly of the index table and sections inserted during recording, ie: Evt_CAS_Ecm(1 ...ComponentNumber) as 
discussed in more detail later. 

Use of index tables alone 

[0391] The use of the index table alone upon reading of a file is very simple to implement. This mode of operation 
is obligatory in Trick-mode; fast forwarding necessitating jumps in the file, or rewinding. In addition, it may be advan- 
tageous to test its performance in normal reading mode of speed x 1 . 

[0392] To give an example of use, take the following scenario using a file of 1 5 minutes in length, with 900 Indices, 
one per second. A command is sent to read forward at speed x 1 from the 5^^ minute. The following functions are then 
performed by the HDVR:- 

search for the 300^^ index, Hdvrlndex in hfmd 
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read the address stored at that index, HdvrlndexAddress[300], and updates the current position, cur_pos 

read the CIVIIVI corresponding to that index point, HdvrlndexCMM[300][1...ComponentNumber], and update the 

current CMM, cur_CMM[1 ...ComponentNumber] 

optionally, construct or update the table In anticipation of loading the subtable HdvrlndexCmm[300-n...300+n][1... 
ComponentNumber] 

[0393] HDVR_USER then sends the identifier of the current CMM, cur_CMM[l to the CMPS, recovers the control 
word and descrambles the components. 

[0394] There follows a request to read forward in the file, HdvrlndexAddress[301]-l-ldvrlndexAddress[300] blocks 
which correspond to a reading of 1 second. 

[0395] At the time of receipt of Evt_Write_Flfo_Completed, the preceding commands are repeated for the 301 
Hdvrlndex. 

[0396] The advantage of this solution resides in the synchronisation of the descrambling processes, and of navigation 

in the index table; there are no asynchronous modifications of the CWs. 

[0397] The principal pitfall Is the double anticipation of the CMM positions by this operation: 

a first overestlmation, upon recording, of maximum duration cryptoperiod/ security_coefficient seconds in the per- 
manent regime, and of cryptoperiod seconds in the critical transitory regime, 
a second overestlmation, upon reading, of a maximum duration of HdvrlndexTimeStamp s. 

[0398] Knowing that a CMM applies to 2 cryptoperiods, this last approximation of approximately one second should 
not perturb the descrambling of the data in reading mode of speed x 1 . All the more since in Trick-Mode, this solution 
becomes unworkable. 

Use jointly of index tables and sections inserted upon recording 

[0399] Upon the recording of a file, for each cryptoperiod and for each component, there is inserted a section that 
can be filtered by the /W/oac/ device upon reading, allowing one to obtain Information concerning the change In CWs 
in the STS, as well as that contained in the hfmd. 

[0400] Unfortunately, because of the approximation of the CMM positions in CMM_table upon recording, there Is a 
variable discrepancy between the CMM information of the STS stream, Evt_CAS_Ecm(1 ...ComponentNumber), and 
the information contained in the hfmd, HdvrlndexCMMfl ...HdvrlndexNumber][1 ...ComponentNumber]. To understand 
this discrepancy, consider the n^^ transition from CW(n-) to CW(n), as Illustrated in Figure 23. 
[0401] Performing a reading using the inserted section to change the cur_CMM. 
[0402] From the index i: 

update cur_CMM, ie HdvrlndexCMM[l]=CMM_ld(n) 

read up to index 1+1 

no section between I and 1+1 
comparison between cur_CMM an6 HdvrlndexCMM[i+1] 

same value 
read up to index 1+2 

1/ change of CW at the level of the STS 

2/ the MIoad on the section Inserted beforehand generates an Evt_Top_Ecm 
3/ incrementation of cur_CMM, which becomes CMM_ld(n+1) 

comparison between cur_CMM=CMM_ld(n+1) and HdvrlndexCmm[i+2]=CMM_ld(n) 

Attention, the value In hfmd Is retarded by one index. 

read up to index 1+3 
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no section between i+2 and i+3 
comparison between cur_CMM=CMM_ld(n+ 1) and HdvrlndexCMM[i+3]=CMM_ld(n+ 1) 

same value 

the retardal of the index is made good 

[0403] The reading occasionally produces a retardal of indices, but this problem can be compensated for. 

[0404] Conversely, if the Application requests a reading from index i+2, the result of the combined use of sections 

and the index table can prove to be disastrous: 

- update cur_CMM, \e HdvrlndexCMM[i+2]=CMM_ld(n) 

read up to index i+3 

no section between i+2 and i+3 

Comparison between cur_CMM_ld(n) and HdvrlndexCMM[i+3]=CMM_ld(n+1) 

[0405] Strangely, the value in hfmd is to an index in advance. One has therefore missed the inserted section. 
[0406] Two cases present themselves: 

one lias confidence in cur_CMM, and one keeps a retarded Ecm (dangerous) 

one has confidence in HdvrlndexCMM[i+3], and in this case what is the use of the inserted section 

[0407] To conclude, the use of inserted sections during playback of a recorded file can be problematic because the 
positions in the file are produced via hfmd for which the positions, in blocks, are overestimated. It is therefore dangerous 
and a source of error to put together two types of incompatible synchronisation information: 

information of position in hfmd (in Hdvrlndex or CMM_Table) 
sections inserted in the STS 

[0408] It would be more coherent to choose definitively a unique synchronisation basis for the index table for which 
the fineness of the synchronisation will be sufficient if: 

the process of estimation of the Ecm positions is valid (hybrid filter, as discussed in more detail below) 
the HdvrlndexTimeStamp is sufficiently small for the precision of the CW transitions (ie <Cryptoperiod=Ecm re- 
covery time). 

[0409] More detailed discussion of the synchronisation of CMMs, and estimation of bitstream positions is provided 
below. 

Structure of HDVR files 

[0410] Returning to discussion of the structure of HDVR files, as discussed above they comprise management data 
(for example hdvr_file.management_data) and content data (for example, hdvr_file.content_data). 
[0411] In preferred embodiments, the hdvr_file_management_data() is contained in the n first clusters allocated to 
the HDVR file and the hdvr_File_content_data() starts with the following cluster. 

[0412] In order to simplify the access to the file, there is a first file descriptor for the management data and a second 
file descriptor for the stored transport stream (STS). 

Other tables included in the management portion of HDVR files 

[0413] The various tables which make up the hdvr_fite_management_data(), and which were listed above, are now 
described in more detail. 
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CMM table 

[0414] CMM information provided by tine CM PS is stored by tine HDVR Server in a dedicated two dimensional table. 
Each element of the CMM table is stored according to two coordinates:- 

5 

firstly, the CMM table identifier, which refers to the particular CMM family the CMM descriptor belongs to ; and 
secondly, the CMM identifier, which refers to the particular CMM index of the CMM descriptor in the particular CMM 
family. 

10 [0415] Each element of the CMM table is classed as a CMM descriptor and contains the following information : 

a file offset in blocks of the CMM position related to HDVR file content data that allows the HDVR to decipher the 

STS from this CMM file offset to the next one 

the first HDVR Index to reference this particular CMM (this is a cross reference between the HDVR index table 
15 and the CMM's) 

CMM structure as defined by the CMPS 

Chapter table 

20 [0416] The chapter notion is similar to that of DVDs. In particular embodiments, a recording always contains at least 
one chapter. Chapters are also play entry points and the chapters are linked to the HDVR indices. The chapter beginning 
markers, as well as their characteristics (see below) are transported by the CM Ms provided by the CMPS at the time 
of the recording phase. A recording comprises a maximum number of MaxChapterNumber chapters. 
[0417] The chapters are stored together in a single table referred to as Chapter_Table() which contains a maximum 

25 number of chapters, MaxChapterNumber. 

[0418] Chapter information arises from two distinct sources:- 

firstly, from the HDVR chapter table; 

secondly, chapter information is provided during recording from a broadcaster and encapsulated into a special 
30 CMM that holds what the HDVR defines as the CMM chapter control. In further variants this CMM chapter control 

holds viewing rights in a similar fashion to existing MPPV. 

[0419] In order to group into the same structure all information related to a chapter descriptor, a reference to the 
special CMM is inserted into each chapter descriptor as the CMM chapter control's coordinates. 
35 [0420] The chapter table is a one-dimensional array of HDVR chapter descriptors. Each chapter descriptor contains 
the following information :- 

the HDVR index reference {Hdvrlndex_lcf) corresponding to the time-date that is bookmarked by the chapter (taking 

the origin as the beginning of the STS); 
40 - the chapter duration; 

a trickmode bitmap that specifies for each trickmode, such as pause, fast-forward, fast-rewind and so on, whether 

the particular trickmode is enabled or disabled. This trickmode is suitable for the whole chapter; 

a control viewing word that is compared with the parental control data structure according to a particular HDVR 

algorithm and defines whether the chapter is viewable or not ; for example, according to a user's PIN code and 
45 the moral content of the current chapter. 

special CMM coordinates (the so-called CMM chapter control, as discussed above) 

Private PMT table 

50 [0421] The Private PMT (programme map table) is a PMT belonging to the HDVR which takes an inventory of the 
information necessary for the exploitation of the components of the recorded or soon-to-be recorded service. It com- 
prises two pseudo tables, one of which is provided by the client (who knows about the nature of the components), and 
the other of which is provided by the CMPS (which knows the active conditional access (CA) PID for each component). 
[0422] During the recording, the recorded service plan can be modified; there can therefore be one or more private 

55 PMTs applicable to the recording. One MPEG section inserted into the STS marks each development of the recorded 
service plan. Furthermore, the HDVR inserts up to three other MPEG sections in the recorded bitstream. 
[0423] The number of applicable private PMTs is limited to MaxPrivatePMTNumber. 

[0424] They are grouped together in a table referred to as Private_Pmt_Table() which takes inventory of a maximum 
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private PMTs MaxPrivatePmtNumber, which each tal<e an inventory of components IVIaxComponentNumber. 
[0425] A Private PIVIT table is a one-dimensional array of private PIVIT descriptors. The HDVR private PIVIT descriptor 
is an HDVR-defined embodiment of a common MPEG-2 defined PMT (see ISO/I EC 13818 for further information). 
[0426] The following Information is added / removed to an ISO like PMT to create an HDVR private PMT:- 

HDVR use's PID information. Indeed the HDVR inserts some of its own PID into the original TS to obtain an STS 
PID information relating to unrecorded components is removed from the original TS to obtain an STS. For each 
component, CA_PID Information (CA standing for Conditional Access in this context) Is removed as the CA aspect 
Is managed by the CM PS and the HDVR does not deal directly with the CA content 

for each component some CMM information is added to allow the HDVR to playback encrypted STS. So the CMM 
family which the component depends upon is specified. 

for HDVR internal use, the CMM family to which the CMM chapter control belongs is specified 

a file offset in blocks of the private PMT descriptor position related to the HDVR file content data for which the 

present private PMT descriptor is suitable 

the HDVR index reference corresponding to the time-date whose origin is the beginning of STS, from which the 
present private PMT descriptor is suitable 

Rights and the Parental Control Data Table 

[0427] The rights group together the information relating to the authorisations associated with the playing of a pro- 
gramme and are all supplied once the programme is recorded. 

[0428] This Information is stored together In a single table referred to as Parental_Control_Data(). 

The Parental Control Data structure provides viewing rights control with a chapter granularity. It is used by the HDVR 
server to allow or forbid access to a chapter section or the whole file according to two different processes:- 

a comparison between a parental control data PIN code and the user's own PIN code level with an external control 
such as a PVR control (where PVR stands for Personal Video Recorder, the high level end-user API of video 
recording functionality). The access control is suitable for the whole HDVR track file. 

a comparison between a particular parental control table that associates a parental chapter control word for each 
chapter of the HDVR chapter table. In particular embodiments, it enables or disables the viewing control mecha- 
nism. If viewing control is enable for a particular chapter, then the HDVR server compares the global parental 
viewing control word with the related chapter viewing control word and fixes the HDVR automaton player state 
according to an Internal HDVR algorithm, such as forcing the automaton to a pause mode before the chapter 
concerned begins. 

[0429] In certain embodiments the HDVR provides free read/write access to the parental control data and in such 
embodiments, the HDVR cannot be responsible for the efficiency of the parental control mechanism. 

Maximum values table 

[0430] In order to make the management data structure dynamic, the maximum sizes of each of the tables are 
provided in the header of the HDVR file. This table Is referred to as Max_Values(). 

[0431] The role of Maximum Values is to assume the dynamic structure of HDVR file management data. So for each 
HDVR structure declared above, except the general information basic structure, the Maximum Values structure spec- 
ifies Its offset and length into the HDVR file management data. This provides an easy mechanism to extend the Internal 
format without any compatibility problems. So, for example, an old HDVR server is able to read newer HDVR file tracks 
in the case of HDVR file tracks exported between two different STBs via a firewire bus. 

Generalities and the General Information table 

[0432] The generalities group together the general information on the recorded programme. They are stored In a 
table referred to as General_lnformation(). 

[0433] General Information contains the followings at a sight information :- 

a CM PS private information so called CM PS file identifier. Note that this Information is CM PS read only mode and 

do not pass through the HDVR server API. 

the HDVR Server version number which creates the current HDVR file track 
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the delta time elapsed from one HDVR index to the next one. It can be also viewed as the HDVR index time 
sampling period. 

the HDVR file track's total duration 
the total STS size in blocks 

5 - the current allowed time-shifting depth. Note that a null value is considered as an infinite time-shifting depth, for 
example in the common case of file recording. 

the definition of a client private zone given by its HDVR file management data offset and its length. Note that HDVR 
Server API does not provide any read/write access to this dedicated zone. Client zone input/output operation is 
on client's charge. 

10 - the recording mode from the different following allowed states:- 
immediate mode for an user instant recording 

push mode for a broadcaster's special use, for example to upload commercial offers 
programmed mode for a one-shot differentiated recording 
15 . periodic programmed mode for a periodic differentiated recording 

time shifting mode. 

the HDVR Player Server identifier if there is currently an HDVR Server playing the HDVR file track, in order to 
avoid concurrent file access 

20 - the HDVR Recorder Server identifier if there is currently an HDVR Server recording the HDVR file track, in order 
to avoid concurrent file access. 

Storage of HDVR management data 

25 [0434] For the hdvr_fHe. management_data, the CMM Table (CmmTab) is a large table (several Megabytes) and 
filling it depends on the broadcast characteristics and the duration of the recorded programme. In order to avoid the 
CmmTab occupying space unnecessarily on the disk, the table is not created on the disk with the maximum value 
(CmmMaxNumber), but gradually during the recording. On the other hand, the offsets for achieving the different Cm- 
mTabs (in the case of internal encryption) take into account the CmmMaxNumber value. 

30 [0435] With reference to Figure 24, one therefore obtains on the disk an hdvr_file. management_data made up of 
holes. 

[0436] Figure 24 illustrates a special functionality of the GFS library that allows a file to have a virtual size superior 
to its effective disk allocation size. For example, HDVR File management data has a virtual size that can provide 
complete management for a total HDVR track duration of 20 hours. However, generally, the HDVR track is only 2 or 3 
35 hours long. According to the GFS library ho led- file feature, the virtual size of HDVR file management data is not entirely 
allocated: some unallocated clusters are present into the hdvr_file.management_data offset range. 

HDVR content data - Stored Transport Stream 

40 [0437] Leaving discussion of the management data stored by the HDVR and returning to discussion of the structure 
of the stored content, the STS (stored transport stream) is now described in more detail. 

[0438] The STS is the name given to the bitstream recorded by the HDVR and is made up of the following data:- 

reproducible data of the service to be recorded (client's choice) 
45 - one or more sets of video data 
one or more sets of audio data 
one or more sets of subtitles 
teletext information 
data inserted by the HDVR 

50 

[0439] The data inserted by the HDVR is in the form of MPEG sections and is referred to as 

H DVR_<section_name>_SECTION elsewhere. 

[0440] The HDVR_NEW_PMT_SECTION is inserted in order to mark each recorded service plan change. 
[0441] There is a maximum of MaxPrivatePmtNumber-1 HDVR_NEW_PMT_SECTION sections in the STS. 
55 [0442] The HDVR_TIME_TAG_SECTION section is periodically inserted in order to provide an indication of the time 
that has passed during the playing of the STS. This section is optional. 

[0443] The HDVR_CAS_ECM_SECTION section is only used in the case of internal encryption of the reproducible 
data (DVB-CS) and is inserted to mark the beginnings of the cryptoperiods. 
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[0444] The HDVR_CAS_ECM_SECTION allows, during the playing of an STS, the signalling of a change of CW for 
the associated reproducible components and to apply therefore a new pair in the descrambler. 
[0445] There are as many different types of HDVR_CAS_ECI\/l_SECTION sections which distinct EClVI PIDs for the 
recording service. An HDVR_CAS_ECM_SECTION section type is therefore associated with each CMM famiiy. 

Recordal of data 

[0446] Finaliy, some further details are provided concerning the process of recordal of content by the HDVR and the 
cases of internal and external encryption are examined. 

[0447] Figure 25 illustrates the flow of data between the HDVR controller and the mass storage device. The data 
going to and coming from the Mass Storage Device is transmitted via FIFO (first in first out) memories, which may be 
of different sizes. 

[0448] A recording comprises a maximum of MaxCmmNumber CMM. The returned CMM contains an encrypted part 
and another clear part and only the latter is directly exploitable by the HDVR: it provides the navigation and restriction 
constraints for the STS part associated with the CMM. 

[0449] Since the granularity of the file is a block, a CMM applies itself to a collection of consecutive blocks. The start 
point of the application of a CMM in the STS is identified by a block number. 

Internal encryption 

[0450] For internal encryption, the reproducible data, upon leaving the demultiplexer 230, remains encrypted and is 
recorded without modification and the decryption of the reproducible data is then done at the time of playing. The 
decryption keys are broadcast using the ECM transported on one or several ECM PIDs and are valid for one cryptope- 
riod. The changing of the cryptoperiod is signalled within the broadcast. The decrypting keys are recovered at each 
new cryptoperiod by the HDVR server by using the services of the CM PS server. 

[0451] For internal encryption, there are as many CMMs as there are cryptoperiods for the duration of the recording 
within the MaxCmmNumber limit: the encryption is said to be temporal. 

[0452] Each CMM transports, among other things, a pair of keys (referred to as CW: control words) which allow the 
decrypting during playing, for one cryptoperiod, of one or several reproducible components. The CWs are found in the 
encrypted zone of the CMM and are not directly exploitable by the HDVR: it is necessary to ask the CMPS for an 
exploitable CW. 

[0453] For this type of encryption, there can be ECMs as a service which can be applied to one or several or even 
all of the reproducible components. Consequently, the CMMs are grouped together by CMM family and this number 
is determined by the number of ECM PID families - that is, the number of distinct ECM PI Ds referred to in the programme 
map table (PMT). To each of these families, there are associated dependent encrypted components, for example: 

ECM PID X broadcasts key pairs for the reproducible video component. 
ECM PID X broadcasts the key pairs for the reproducible audio component. 

ECM PID Y broadcasts the key pairs for the reproducible teletext component. 
ECM PID Z broadcasts the key pairs for the reproducible subtitle component. 

[0454] For this example, there are three CMM families. A correspondence table defines the associations between 
the reproducible data and the CMM families. In the case of a change in the service plan, a new correspondence table 

will be defined: for a new ECM PID, a new CMM family will be created. For this encryption, the number of possible 
CMM families will be equal to the number of reproducible components that can be recorded with the HDVR server. 

External encryption 

[0455] For external encryption, the reproducible data, upon leaving the demultiplexer 230 is in the clear and the 
encryption of this data is done at the time of writing on the disc and the decryption is done at the time of playing. The 
decrypting keys to be applied are determined by the CMPS and recovered by the HDVR server by using the services 
of the CMPS server. 

[0456] For external encryption, there can be as many CMMs as there are keys applicable to the recording within the 
MaxCmmNumber limit. The allocation of these CMMs on the recording is the responsibility of the HDVR: the encryption 
is said to be spatial. 

[0457] Each CMM transports the key (hereinafter referred to as CK) which allows the encryption and decryption of 
all the reproducible components of the recording service. The CK is found in the encrypted zone of the CMM and is 
not directly exploitable by the HDVR: it would be necessary to ask the CMPS for an exploitable key. 
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[0458] For this type of encryption, tinere is always only one CMM family. 

[0459] A CMM family is grouped together in a table called Cmm_Table() which contains a maximum of MaxCm- 
mNumber CMMs. 

[0460] The bit stream recording and playback procedure will now be described in more detail. The recording proce- 
dure involves the estimation of positions in the bit stream with which control words will be synchronised for the later 
playback process. The estimation is required in order to allow this recording technique to afford the advantages of 
security and minimal processing and storage. 

[0461] Turning to a second general aspect of preferred embodiments, the estimation of position in a bitstream, and 
the synchronisation of conditional access information with the bitstream are now described in more detail. 

CMM SYNCHRONISATION 

Bit stream synchronisation 

[0462] Before discussing some problems associated with recording scrambled bit streams and their solutions, the 
structure of such bit streams will now be described with reference to Figure 26. 

[0463] In Figure 26 a scrambled MPEG bit stream 1 300 (such as that received at the receiver/decoder from a broad- 
cast centre) is illustrated. The bit stream as shown is divided into successive cryptoperiods 8000, 8002, 8004, each 
scrambled with a corresponding control word. The bit stream 1300 also contains Encrypted Entitlement Control Mes- 
sages (ECMs) 8010, 8012, 8014. 

[0464] To provide the system with some redundancy (and therefore fault-tolerance), each ECM in fact contains two 
control words: one for the present cryptoperiod, and one for the following cryptoperiod. Thus ECM 8010 contains the 
control words to descramble both cryptoperiod CP7 8000 and CPS 8002. Similarly, ECM 8012 contains the controls 
words necessary to descramble both cryptoperiod CP8 8002 and CP9 8004. In fact, the ECMs are periodically retrans- 
mitted to ensure the continued smooth operation of the system in the event of the user changing channel ('zapping') 
or a temporary fault preventing reception of the first set of ECMs. For simplicity, only the first ECM in each such series 
is shown. 

[0465] The conditional access smartcard 5500 typically takes several seconds to decrypt each ECM, but each cryp- 
toperiod is relatively long (1 0 seconds in the preferred embodiment), so there is not generally a problem with timing in 
the case of receiving and decoding live content (such as that received via satellite from a broadcast centre). 
[0466] In the case of recording an audio/visual bit stream (such as a received digital television broadcast) to hard 
disk and the subsequent playback, timing can be more of a problem, since, in general, conditional access data relating 
to a recording will have to be manipulated before, during or after storage in order to overcome the time-limitation of 
the recording (in other words, remove the dependence on the time-varying global encryption key Kq used to encrypt 
the incoming ECMs). 

[0467] It has been found advantageous to synchronise the scrambled content 800 (in the form of an audio/visual bit 
stream) with the relevant ECMs, so that the control words 5600 can be fed into the descrambler at the correct time to 
allow the content 800 to be descrambled. More precisely, it has been found useful to synchronise the audio/visual bit 
stream and conditional access data (preferably, as noted above, in the form of the original ECMs) at the time of storing 
the audio/visual bit stream and conditional access data. 

[0468] The synchronisation process is performed by the HDVR 3850 in preferred embodiments. Alternatively, the 
synchronisation process is performed by the CM PS system 2300. 

[0469] During the synchronisation process, a reference is made between the conditional access data and a corre- 
sponding position in the bit stream. Typically, this reference takes the form of two pieces of data: the identifier of a 
CMM corresponding to the conditional access data (ECM) and the corresponding file write pointer (FWP) in the bit 
stream. In the preferred embodiment, such a reference is stored in a table in the previously-mentioned management 
data portion 2112 of the file also containing the stored bit stream, so that it can be easily accessed during playback. 
[0470] The synchronisation can be brought about by evaluating the position of each ECM as it arrives, storing such 
positions, and reloading the stored positions during playback as the basis for timing when the control words should be 
delivered to the descrambler. The evaluation of such positions exactly to the nearest bit or byte in the bit stream can 
occasionally be inefficient. 

[0471] Some issues concerning the exact determination of the position of an ECM in a stored bit stream will now be 
considered in the context of the present system, where the bit stream is fed from a demultiplexer into a remultiplexer, 
then into storage in a hard disk via a FIFO. 

[0472] Data, such as ECMs, is extracted from the output of the demultiplexer by the MLOAD device, operating semi- 
autonomously of the upper software layers in which the control ofthe synchronisation process is more easily managed. 
Due to interrupt latency and other similar considerations, the receipt of the ECM from the MLOAD device cannot be 
precisely timed. Furthermore, receipt of the ECM is usually only acknowledged by a EVT_CAS_ECM event 8400 (not 
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shown) generated by the conditional access smartcard after certain checks have been made (including a check as to 
whether or not the ECM is 'new' or merely a retransmission). This event will lag the actual receipt of the ECM itself by 
a time offset, herein referred to as At, and the amount of data corresponding to At will vary, depending on the prevailing 
bit rate of the bit stream. The subject of At will be returned to later. 

5 [0473] One issue to consider is that the Fl FO buffer has a dynamically adjustable size, and may vary between empty 
and full depending on unpredictable factors. A further issue - returned to later - is that in accordance with the abstracted 
architecture of the receiver/decoder, data is stored to the hard disk in indivisible segments such that the file write pointer 
(FWP) is only determinable before and after the writing of each segment (of perhaps, 2 IVIegabytes of data at a time); 
the 'current' FWP cannot be read at any arbitrary time (when, for example, an EVT_CAS_ECM arrives). 

10 [0474] The net result is that an exact determination of the ECM position can require additional analysis of the bit 
stream as it arrives and/or an intimate knowledge of the state of various buffers and file pointers in the system (which 
can be relatively inefficient). 

Estimation of positions in the bit stream 

15 

[0475] As explained briefly above, each ECM relates to a particular 10 second cryptoperiod and also contains the 
control word for the next cryptoperiod, which offers some scope for a different solution for evaluating the position of 
the ECM, namely estimation (rather than determination) of the position. 

[0476] Various means have been found of estimating the position, and some of these will be described later. One of 
20 the more efficient means involves manipulating the bit stream in such a way that the worst-case estimate - relatively 
quickly computed - will always yield a 'safe' answer, and can always be used in preference to more involved estimation 
methods. By 'safe', it is implied that, during the reconstruction of the stored bit stream using the above estimated 
positions to control the timing, the control words will each be delivered to the descrambler during the appropriate two 
cryptoperiod time-window, and the descrambling operation will thus operate correctly. If, by contrast, a control word is 
25 delivered during the wrong cryptoperiod, the descrambler will fail to descramble the stored bit stream, resulting in a 
loss of picture and/or sound for the user. 

[0477] This above-mentioned means for estimating the position of the conditional access data (or any other appro- 
priate data, for that matter, such as particular subtitle, audio, video, application or other data) in the bit stream will now 
be described with reference to Figure 27. 

30 [0478] In Figure 27, the segments S21 , S22, S23 and so on are shown in relation to the bit stream (which is shown 
having a data offset scale - due to varying bit rates, as discussed later, the segment sizes would be distorted and 
uneven if a time scale were used). Also shown is the equivalent file write pointer (FWP) values, and the prevailing 
cryptoperiods CP12, CP13, CP14. The actual position of an ECM 5602 in the bit stream is shown, as is the 
EVT_CAS_ECM event 8400 which occurs at a time At later. The boundaries of the segment are shown as dashed lines 

35 either side of the ECM 5602 and EVT_CAS_ECM event 8400. Lastly, the corresponding estimated position ofthe ECM 
(FWPest) is shown to the right of the end of the segment containing the ECM 5602. 

[0479] The end of a particular segment (and therefore the beginning of the next segment) is signalled to the CM PS 
system (which is largely responsible for the estimation) near-instantaneously by the reception of an 

EVT_FIFO_WRITE_COMPLETED event, generated by the mass storage device to indicate that the current segment 
40 write operation has completed. At this point, the current FWP can be assumed to be equal to the previous FWP plus 
the segment size just used. 

[0480] The estimation comprises determining the segment in which the ECT_CAS_ECM event 8400 falls (since the 
reception of the ECM 5602 is not itself globally notified, not least because most received ECMs are mere retransmis- 
sions which are then subsequently discarded by the conditional access system), and then taking the estimate of the 
45 position according to the following formula: 



FWPest = E\^''^^^size_segment(i) + size_ 

50 

where EQ is an expectation operator, size_segment(n) is the size of each segment (in the present illustration, 
size_segment(22) = 2 Mb, for example, and the sum of all previous segment sizes is 30 Mb), size_fifo is the amount 
of data in the FIFO (which, as noted, can vary), and k 'ls a "security parameter" (typically between 0 and 1 Mb) 
55 which adjusts for further latencies and timing problems in the system so as to ensure the estimate is an overestimate 

(see below). 

[0481] The expectation term E() in the above equation addresses the fact that the size_fifo parameter at least cannot 
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be determined exactly. Typically, for a given maximum allocated FIFO size fs (say), E(size_fifo) is taken as 14 fs (which, 
in the above example implies a maximum FIFO size of 0.2 Mb). As will be described in more detail later, the choice of 
size_segment can be fine-tuned to keep the resulting estimate 'safe' yet efficient. 

[0482] In the example given in Figure 27, E(fifo_size) is taken as 0.5 Mb, k is equal to 0, and the Lsize_segment(i) 
5 term is equal to 32 Mb, yielding a FWPest of 32.5 Mb when the above formula is applied. 

[0483] Underlying the above formula is the realisation that, because of the double control word redundancy of ECMs, 
it does not matter if the estimated position of the ECM falls within the cryptoperiod immediately after that with which it 
is associated. The estimation will fail, however, if the estimated position falls within cryptoperiods beyond that, or in 
the cryptoperiod immediately preceding the correct cryptoperiod. 
10 [0484] In Figure 27, for example, during the writing of segment S22, it is impossible to distinguish between 
EVT_CAS_ECM events 8400 caused by ECMs sent in respect of cryptoperiod CP1 2 and EVT_CAS_ECM events 8400 
caused by ECMs sent in respect of cryptoperiod CP13. Since to incorrectly label a CP12 ECM as a CP13 ECM is not 
critical, and incorrectly labelling a CP13 ECM as a CP12 ECM is fatal, the need for an overestimate can therefore be 
appreciated. 

15 [0485] It should also be considered that the maximum segment size can not exceed the size as a cryptoperiod (less 
the size of the FIFO size parameter), since with larger segment sizes there exists the possibility of receiving two 
EVT_CAS_ECM events 8400 within the same segment write operation, and two sets of control words. This too is fatal, 
since, owing to various system constraints described above (and others, including the asynchronous nature of inter- 
device communication), there is ambiguity about the order in which the corresponding ECMs were received, which can 

20 lead to the wrong control words being applied to the wrong cryptoperiods. 

[0486] Bearing the above in mind, the robustness of the estimation routine in extreme cases will now be illustrated 
further with respect to Figures 28 and 29. 

[0487] In Figure 28, an incoming ECM 5602, resulting EVT_CAS_ECM 8400 and estimated position of the ECM 
(FWPest) are shown. This represents one extreme case where the EVT_CAS_ECM event 8400 is received just before 
25 the EVT_FIFO_WRITE_COMPLETED event, at the end of the segment S22. The resulting estimate (32.5 Mb, in fact) 
here is at its closest to the ECM 5602 (at a distance of 0.5 Mb plus the data size equivalent to At), and in this case falls 
within the correct cryptoperiod (CP13). 

[0488] In Figure 29, the ECM 5602 and resulting EVT_CAS_ECM 8400 are shown fractionally further forward in the 
bit stream, with the EVT_CAS_ECM 8400 occurring within the next segment S23. The resulting estimate (34.5 Mb, in 
30 fact) here is at its furthest from the ECM 5602 (at a distance of 2.5 Mb plus the data size equivalent to At), and falls 
within the cryptoperiod (CP14) after the correct cryptoperiod (CP13). 

[0489] Other examples can be constructed with different relative positions of cryptoperiods and segments, but it can 
be observed that with the above formula (and with a combined segment and FIFO size no greater than the size of a 
cryptoperiod), the estimated position always falls within the correct cryptoperiod, or the following cryptoperiod (in both 
35 cases, with acceptable results). 

Structure underlying the synchronisation and estimation 

[0490] The various structures underlying the methods of synchronising and estimation described earlier (particularly 

40 with reference to Figures 12 and 13) will be described in more detail, with reference to Figures 30 and 31 . 

[0491] In Figure 30, the scrambled bit stream 800 is shown passing through the demultiplexer/remultiplexer/descram- 
bler 2010 (here shown in its remultiplexing capacity) and FIFO 8020 (operated by the FIFO device 3744 - not shown) 
on its way to being stored in the file portion 2110 in the hard disk 2100 (operated by the mass storage device 3728). 
The MLOAD device 3438 extracts ECMs 5602, and URMs 5612 and CMPS_EMMs 5614, and forwards these to the 

45 conditional access system 5000 and CMPS 2300 respectively. Control words 5600 decrypted by the conditional access 
decryption engine 8500 in the conditional access system 5000 are sent to the CMPS 2300, accompanied by the broad- 
cast of an EVT_CAS_ECM event 8400. As described earlier, the control words (two per CMM for redundancy), URMs 
561 2 and CMPS_EMMs 561 4 are combined and encrypted by the CMPS decryption engine 8550, and then sent, via 
the HDVR 3850, and the mass storage device 3728, to the hard disk 21 00 for storage in the management data portion 

50 2112 of the relevant file. EVT_FIFO_WRITE_COMPLETED events 8410 are broadcast periodically (and received by 
the HDVR 3850 in preferred embodiments, or alternatively by the CMPS 2300 directly) when a segment write operation 
has completed. EVT_CA_CMM events 8552 are sent from the CMPS 2300 to the HDVR 3850. 
[0492] In Figure 31 , the demultiplexer/remultiplexer/descrambler 201 0 produces the desired unscrambled bit stream 
810 by descrambling the scrambled bit stream 800 from the portion 2110 with control words 5600 generated by the 

55 CMPS decryption engine 8560 in the CMPS 2300. The above-mentioned decryption engine 8560 is fed by CMMs 
retrieved from the management data portion 21 1 2 of the relevant file in the hard disk 21 00 via the mass storage device 
3728, and also produces URMs 5612 and CMPS_EMM 5614 for further processing by the CMPS 2300. 
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Segment size 

[0493] Returning to other considerations, it is noted that cryptoperiods have a predetermined size in the time domain 
only, their corresponding data size varying with the bit rate of the bit stream. A further consideration is that particularly 
5 'safe' (in other words, small) segment sizes relative to the expected sizes of cryptoperiods are inefficient, since the 
more EVT_FIFO_WRITE_COMPLETED events which are generated per second, the more processing power is un- 
necessarily used up. 

[0494] The optimal segment size is now considered in more detail: 

10 a small amount of data in a segment allows many segments to be created per cryptoperiod. This may allow more 

precise measurements, but creates the risk of having too many events per cryptoperiod, which can lead to a 
degradation of computational efficiency; 

a medium amount of data in a segment provides a compromise between large and small segments. This includes 
a range of possible segment sizes and the optimum size must be chosen from this range; and 
15 a large amount of data in a segment creates fewer, larger segments per cryptoperiod. This has the advantage of 

requiring less processing because of fewer segment end events, but too large a segment can (potentially fatally) 
cause more than one EVT_CAS_ECM event to be received during the writing of the segment. 

[0495] To recap, although the smallest segments create the most accurate estimates, using small segments requires 
20 more processing and is therefore slow. The bit stream is divided into segments that are as large as possible to keep 
processing to a minimum, while keeping the estimates as accurate as possible. To this end, various medium-sized 
segments are generally preferred as a useful compromise between speed and accuracy. 

[0496] In view of the above consideration of segment size, a further important aspect of the system relates to the 
determination of appropriate segment size so as to maximise efficiency (or, in other words, maximise the segment 

25 size) whilst retaining 'safe' estimates of ECM position. 

[0497] This determination of appropriate segment size is done by applying filters to observed characteristics of the 
bit stream, such as bit rate. This filtering, as with the estimation, is performed by the CMPS 2300. The filtering in most 
cases serves to reduce the susceptibility of the estimation procedure to large fluctuations in bit rate. 
[0498] The use of filters and other means to optimise the segment size used to store portions of the bit stream to 

30 hard disk will now be described in more detail. 

Optimising segment size 

[0499] Numerous methods can be used to optimise the segment size, typically utilising at least one characteristic of 

35 the bit stream to help determine the segment size. 

[0500] In the preferred embodiment, a dynamic filter is used whose inputs are measurements of the average bit rate 
of the bit stream, and whose output is the segment size. In general, however, two main types of filter are considered 
here: static and dynamic filters. Implementations of these filters will now be described, as well as a discussion of their 
relative merits. 

40 [0501] First of all, static filters will be described. 

[0502] The principal characteristic of the static filter is that the size of the segments is as close to constant as possible. 
Static filters are more easily employed than dynamic filters because no processing of the bit stream is required to 
determine optimum segment size as in the case of dynamic filters, but they deal less well with large variations in bit 
rate. However, static filters have a tendency to create too many events per cryptoperiod, causing the manipulation of 

45 the bit stream to degenerate and the theoretical accuracy to quickly diminish. 

Constraints affecting the choice of this constant segment size include the following: 

[0503] The size of the segment must not exceed a cryptoperiod in length (also taking into account buffered data) 

50 

Size_Segment (Mb) < bit rate (Mb/s) x cryptoperiod (s) - FIFOSize (Mb) 
[0504] The maximum size of transfer (segment size) is limited 

55 

Size_Segment (Mb) < 32 (Mb) 
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[0505] The following assumptions regarding the above parameters are not unreasonable: 

One cryptoperiod is at least 6s 

The bit rate is at least 1 Mb per second 

FIFOSize is less than or equal to 32 IVIb (and typically 2 Mb) 

[0506] These above assumptions give the result that: 



Size_Segment (Mb) < 6 (Mb) - FIFOSize (Mb) 



(and consequently that FIFOSize « 6). 

[0507] With the typical FIFOSize of 2 Mb, the segment size is therefore 4 Mb. 
[0508] Dynamic filters will now be described. 

[0509] A dynamic filter adjusts the size of the segment to accommodate the bit rate. High bit rates have short duration 
segments and vice versa. The dynamic filter must, however, compromise between few large segments and many small 
segments. If the bit rate is low or constant, the segments can be large, creating fewer events per cryptoperiod while 
still affording the resolution necessary for the recording and synchronisation of the bit stream. If the bit rate is high or 
varies greatly, the smallest segments are required to afford the most accurate measurement, but create many events 
per cryptoperiod, thus degrading the bit stream manipulation. The aim of the dynamic filter is to create the largest 
segments possible for the bit stream. 

[0510] The dynamic filter attempts to limit the segment size to the equivalent of a time expressed as a fraction of the 
cryptoperiod (referred to below as the 'segment writing time'). The factor defining the segment writing time is an integer 
called the 'security coefficient', such that: 



segment writing time cryptoperiod 

sec urity_coefficient 

[051 1] There are 3 different types of dynamic filter discussed below; rapid, inertial and hybrid filters. In the preferred 
embodiment, a hybrid dynamic filter is used, but in variants of the preferred embodiment other types of static and 
dynamic filter are used. 

[0512] The rapid dynamic filter takes into account the writing time of the preceding segment in order to determine 
the size of the subsequent segment. First the rapid filter calculates the time taken to write the previous segment 
(time_segment(n-1)-time_segment(n-2)), and then calculates the corresponding average bit rate (equal to the size of 
the segment divided by the time taken). The size of the segment (n), size_segment(n) is then given by the formula: 



size seament size_segment(n-^) ^ cryptoperiod 

— ^ time_segment{n-^)-time_segment(r^-2) security_coefficient 

[0513] Time_segment(n) is the absolute time of the reception of the eventof that segment (n) (rather than the duration 
of the segment). 

[0514] In equilibrium (that is, with a constant bit rate), the filter gives security_coefficient number of writes per cryp- 
toperiod, regardless of the actual bit rate. In the case of a low bit rate, the limit value of the size of the segment is the 
same as that of the static filter case, that is, size_segment = 4 Mb. 

[0515] As an example of the use of a rapid dynamic filter with a constant bit rate, using the above formula, if the 
value of the cryptoperiod is fixed at 1 0 seconds and a security coefficient of 4 is chosen, a segment event takes place 
every 2.5 seconds. In the case of a constant bit rate, the system converges towards the limit as defined above. 
[0516] The principal constraint on the dynamic filter is as follows: 



time_segment(n) - time_segment(n-1) < 1 cryptoperiod 



[0517] It can be deduced that at the segment border, the average bit stream (averaged over one cryptoperiod/ 
security_coefficient) does not exceed the security coefficient relationship given earlier. The stability of the filter is guar- 
anteed in this case if: 



average_bit_rate (t + cryptoperiod) > average_bit_rate (t) x securityjcoefficient 
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[0518] From this example it can be seen tliat the bit rate dynamic is linked to the security coefficient by the following 
relationship: 



Dyn 



n + cryptoperiod \ 

bitratcdt 



cryptoperiod 



20 X log(sec urity_coefficient^ 



cryptoperiod 



dB/s 



[0519] The security coefficient value which defines the "robustness" parameter of the filter during bit stream variation 
is determined by real MPEG-2 flow examinations under test conditions. This is to obtain control values for the filters 
so that security parameters and limits may be established. 
[0520] The second type of dynamic filter is an inertial multilevel filter. 

[0521] The principle of this filter is the same as that of the rapid dynamic filter, in that it estimates the bit rate of a 
variable bit rate bit stream using the bit rates of previous segments; however, the estimation process is given a larger 
memory (that is, effectively it has more filter coefficients). Here, the average bit rate is taken as the overall average of 
the average bit rates for the previous security_coefficient number of segment write operations. The estimation of this 
filter has a higher inertia than the first level filter, which allows it to be more stable, though it may be less sensitive to 
the peaks of the bit streams. The inertial filter is similar to the rapid filter in that it uses the writing time values from the 
segment(n-security_coefficient) to the segment(n-l) in order to obtain the size of the segment(n). 
[0522] The formula of the filter is as follows (geometric form): 



size ^segment 



cryptopertodj 



.cry^enod / size _segment{n - i) \ cryptoperiod 

\}{ \ time _ segment (n - i-l)- time _ segment {n - i)J 



sec urity_ coefficient 



(in arithmetic form): 



size_segment = 

1 i^cry^enodf size_ segment(n - i) \ cryptoperiod 

cryptoperiod I time_segment{n - / - 1) - time_segment{n - i)) security ^coefficient 



[0523] The limit values for a constant bit rate in the dynamic filter are identical to those of the static filter, and those 
with dynamic limits are equivalent in terms of performance to those of a rapid filter, the only difference being the re- 
sponse time of the inertial filter (at the security_coefflcient\e\/e\) which has a memory of one cryptoperiod rather than 
a memory of a cryptoper\o6/ security_coefficient as for the rapid filter. 

[0524] This inertia of the inertial filter particularly allows the reduction of very high peaks (and thus the possibility of 
the decreased sensitivity to those peaks), that is, peaks of a higher dynamic than the secu rity_coefficient aWovjs. The 
static filter achieves an optimum value if peaks are extinguished although the inertia of the memory filter may eliminate 
other values along with this artefact. 

[0525] The third type of dynamic filter is a hybrid hysteresis filter. 

[0526] The two dynamic filters described above (rapid and inertial multilevel dynamic filters) are combined to give a 
better performing filter. The resultant hybrid filter combines the best characteristics of the two filters. The rapid filter 
has the good response time necessary in case of a sudden bit rate drop, but when it identifies a localised peak in a 
segment, it can overestimate the size of the subsequent segment because of the large value being included in the 
averaging process. On the other hand, the inertial filter can dampen bit rate peaks, but its response time limits effec- 
tiveness when there are successive drops. 

[0527] The hybrid filter accommodates for the hysteresis effect (that is, the difference in its reaction to rising and 
descending fronts in the bit rate) by combining the rapid and inertial filters and keeping the flexibility of an inertial filter 
on a rising bit stream front in order to dampen any localised peaks; and the reactivity of the rapid filter on a descending 
bit stream front in order to compensate for the transitions of the high bit rate bit streams towards low bit rate bit streams. 



40 



EP 1 286 349 A1 



[0528] The behaviour of the filters has been investigated using simulations of typical bit streams, which will now be 
described. 

Bit rate simulations 

5 

[0529] Different bit rate patterns are investigated in Figures 32 to 39 using the four filters described above: static, 
rapid dynamic, inertia! dynamic and hybrid dynamic filters. 

[0530] The objective of the simulation is to observe the behaviour of the filters out of their stable behaviour zone 
(that is, not at a constant bit rate). To achieve this, different input bit rate functions are investigated, including a sinu- 
10 soidally varying bit rate (Figures 32 showing the results of the static filter; Figures 33 for the rapid filter; Figures 34 for 
the inertial filter; and Figures 35 for the hybrid filter), a step function bit rate (Figures 36 for the hybrid filter only), a 
triangular function bit rate (Figures 37 for the hybrid filter only), a top hat function bit rate (Figures 38 for the hybrid 
filter only), and a single peak bit rate (Figures 39 for the hybrid filter only). 

[0531] In each set of figures, the figure denoted "a" shows the bit stream over time and the figure denoted "b" shows 

15 the resulting writing time over the number of segments. 

[0532] The figures denoted "a" in each set of Figures 32 to 39 have vertical lines showing the transition between 
segments. As can be seen from Figure 32a (the static filter case), for example, a constant segment size takes a short 
time at high bit rates - reflected in the bunching together of segment transitions at approximately 3, 16, 28 and 41 
seconds - and a relatively longer time at lower bit rates - reflected by the large (temporal) segment widths at approxi- 

20 mately 9, 22, 35 and 47 seconds. As described above, the aim is to avoid such bunching of segments (which results 
in an unnecessary degree of accuracy at the expense of computational efficiency) - in other words, aiming for larger 
segment sizes at high bit rates. 

[0533] The figures denoted "b" in each set of figures each indicate the 'crash line' 8600, which is equivalent to the 
cryptoperiod duration (in this case, 6 seconds). As noted previously, a writing time in excess of this duration can cause 
25 the estimation to fail (because more than one ECM may arrive during the writing of the segment). For the dynamic 
filters (Figures 33 to 39), there is a second horizontal line which shows the writing time to which the dynamic filter 
converges. 

[0534] As mentioned previously, Figures 32 to 35 relate to a sinusoidally varying bit rate simulation lasting 50 seconds; 

in this case, each cryptoperiod lasts 6 seconds, and a security coefficient of 4 is chosen. 
30 [0535] The static filter, rapid filter and dynamic filter create 100, 33 and 28 segments respectively (the fewer the 

segments, the better the filter, in general). The segment writing times are all observed to be below the crash line (that 

is, less than the cryptoperiod in length), and there is no observed instability in the behaviour of the filter. 

[0536] In this test, the hybrid filter offers the best correction of the three dynamic filters and so the other bit rate 

simulation results focus only on this filter. The tendency towards instability is corrected by the hysteresis phenomenon 
35 between the increase and decrease, which is illustrated by the damping 8700 on the increasing front and increased 

reactivity 8750 on the decreasing front as shown in Figure 35b. 

[0537] As mentioned previously. Figures 36 relate to a step function bit rate simulation lasting 50 seconds; in this 
case, each cryptoperiod lasts 6 seconds; and a security coefficient of 4 is chosen. The bit rate of the bit stream is 1 
Mb/s for 25 seconds and then 8 Mb/s for the subsequent 25 seconds, creating a step between two different constant 
40 bit rates. The object of this simulation is to investigate the behaviour of the filter around the typical minimum bit rate. 
[0538] The dynamic filters (rapid, inertial and hybrid) have the same characteristics at minimal flow as the static filter. 
However, they converge towards the limit of cryptoperiod / security_coefflcient. A maximum bit rate limit of 8 Mb/s is 
determined. 

[0539] As mentioned previously, Figures 37 relate to a triangular bit rate simulation lasting 50 seconds; in this case, 
45 each cryptoperiod lasts 6 seconds; and a security coefficient of 4 is chosen. The objective of this simulation is to observe 
the behaviour of each of the filters when faced with a bit rate which increases then decreases. 
[0540] The hybrid filter combines the elevated response time of the inertial filter on the rising portion 8850 of the 
triangular bit rate function, with the strong reactivity of the rapid filter during the decreasing portion 8900 of the triangular 
bit rate function. 

50 [0541] As mentioned previously, Figures 38 relate to a top hat function bit rate simulation lasting 50 seconds; in this 
case, each cryptoperiod lasts 6 seconds; and a security coefficient of 4 is chosen. The bit rate consists of a 'top hat' 
at 8 Mb/s on a base of 2 Mb/sThe maximum limit allows the hybrid filter to be at an established bit rate on the bit rate 
plateau at 8 Mb/s. 

[0542] As mentioned previously, Figures 39 relate to a single peak bit rate simulation lasting 50 seconds which also 
55 incorporates an element of noise; in this case, as before, each cryptoperiod lasts 6 seconds; and a security coefficient 
of 4 is chosen. The bit rate has a weak average noise value around 2 Mb/s, and it presents a very localised bit rate 
peak for 2 seconds with a height of 18 Mb/s. The objective is to show the hybrid filter's capacity for damping a strong 
bit rate peak which is greater than its correction capacity, in order to compensate for anomalous bit rate measurements 
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when estimating the bit rate. 

[0543] The hybrid filter compensates for the large data peak by underestimating the number of segments required 
for that amount of data, thus damping the effect of the data peak in the bit rate estimation procedure. 

5 Further methods of estimation 

[0544] As mentioned earlier, further methods of estimating the position of ECMs in the stored bit stream are envis- 
aged. One set of methods can be implemented, for example, which form the estimate in dependence on a characteristic 
of the bit stream (as opposed to forming the estimate as an offset from the end of a particular segment, for example, 
10 as described above), such as the average bit rate, or time elapsed between points in the bit stream. 
[0545] One such method will now be described. 

[0546] The following method further assumes that, in contrast to the foregoing, the file write pointer (FWP) can be 
established at the time when the EVT_CAS_ECM is received (but not at the time when the ECM itself is received). 
[0547] The position of the ECM in the bit stream can then be estimated in four steps: 

15 

1. An estimation is made regarding the time offset between the reception of the ECM in the bit stream and the 
event signalling the arrival of the corresponding control word ("At"); 

2. An average bit rate during this time period is estimated; 

3. The amount of data "Ad" corresponding to this time period is calculated as the product of At and the bit rate; and 
20 4. The position ("d") of the ECM in the bit stream is then calculated as the present position (FWP) less the data 

offset ("Ad") found above. 

[0548] These steps will be described in more detail below, beginning with the first step (estimating At). 
[0549] Typically, the value of At is assumed, rather than estimated perse, since the time taken to decrypt a control 
25 word is approximately constant (of the order of a couple of seconds). If possible, however, the error in at least one 
previous estimate can be measured, and used to correct future estimates. Other means may of course be provided 

for estimating At. 

[0550] The second step (estimating the average bit rate) will now be described in more detail. 
[0551] For simplicity, the average bit rate may be calculated in respect of the entire period between successive 
30 EVT_CAS_ECM events (approximately a cryptoperiod in duration) or preferably in respect of a shorter period, such 
as the length of a segment. In each case, the bit rate is calculated as total data offset divided by total time. 
[0552] The third step (calculating the data offset) will now be described in more detail. 

[0553] The product of the bit rate estimate and the At estimate gives Ad, the estimated amount of data elapsed since 
the reception of the ECM: 

35 

Ad (Mb) = Bit rate (Mb/s) x At (s) 

[0554] The fourth step (estimating the position of the ECM) will now be described in more detail. 
40 [0555] Knowing the estimated data offset from the receipt of the ECM, the position of the ECM dean then be estimated 
by subtracting Ad from the current file write position (FWP): 

d = FWP - Ad 

45 

[0556] As mentioned above, other methods of estimating the position of the ECM in the bit stream can of course be 
implemented, and the methods of estimating described above may of course be subject to minor variations, not least 
to take into account different information which may be available at any particular time. 

[0557] The precise details of the implementation of the various functions described above, and their distribution 
50 between hardware and software, are a matter of choice for the implementor and will not be described in detail. It is, 
however, noted that dedicated integrated circuits capable of performing the operations required in the receiver/decoder 
are commercially available or can be readily designed, and these can be used as the basis for a hardware accelerator, 
or more preferably modified to produce a dedicated hardware accelerator, to implement various of the operations 
required, thereby reducing the processing power required to run the software. However, the operations required may 
55 be implemented in software if sufficient processing power is available. 

[0558] The modules and other components have been described in terms of the features and functions provided by 
each component, together with optional and preferable features. With the information given and specifications provided, 
actual implementation of these features and the precise details are left to the implementor. As an example, certain 
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modules could be implemented in software, preferably written in the C programming language and preferably compiled 
to run on the processor used to run the application; however, some components may be run on a separate processor, 
and some or all components may be implemented by dedicated hardware. 

[0559] The above modules and components are merely illustrative, and the invention may be implemented in a 

variety of ways, and, in particular, some components may be combined with others which perform similar functions, or 
some may be omitted in simplified implementations. Hardware and software implementations of each of the functions 
may be freely mixed, both between components and within a single component. 

[0560] It will be readily understood that the functions performed by the hardware, the computer software, and such 
like are performed on or using electrical and like signals. Software implementations may be stored in ROM, or may be 
patched in FLASH. 

[0561] Turning to a third general aspect of preferred embodiments, command sets for controlling the transfer of a 
bitstream are now described in more detail. 

COMMAND SET 

Command set 

[0562] The Personal Video Recorder application (henceforth referred to as the 'PVR') 3154 mentioned above is part 
of a Personal Video Recorder system ('PVR system') which allows the user to record audio and/or visual data (principally 
programmes broadcast to the receiver/decoder) to a mass storage device, such as the hard disk 2100, and also to 
play back such audio/visual data. The data is stored as sequentially-ordered data (in MPEG-2 format in the preferred 
embodiment) and in essence the PVR provides the user with different ways to access this or similar data (indeed, a 
corresponding application for recording and playing back purely audio content is also provided, using fundamentally 
the same principles as will now be described). 

[0563] With reference to Figure 40, the PVR system will now be described in more detail. The hard disk 2100 (or 

other mass storage device) is connected via FIFOs and memory buses (not shown) to both the demultiplexer/descram- 
bler/remultiplexer 2010 and MPEG decoder 2028, such that audio/visual data can be routed freely between the live 
broadcast signal input (outputted by the tuners and demodulators, not shown), receiver/decoder memory (not shown), 
MPEG 2 decoder (for display on the connected television, not shown) and hard disk 2100. 

[0564] The hardware components mentioned are controlled by software devices (not shown), and in particular by 
the mass storage device 3728 and (indirectly) the service device 3736. In turn, the mass storage device and service 
device are controlled by the hard disk video recorder (HDVR) module 3850, comprising two recording threads 3854, 
3856, a playback thread 3858, and shared filing system library ('FS library') 3852. Finally, the PVR application 3154 
issues commands to the HDVR module via the program interface 7000. 

[0565] As can be seen in Figure 40, the PVR system is broken down into several layers, with the effect that the PVR 
application, essentially residing at the top of the chain of command, can entirely ignore lower-level considerations such 
as allocating space on the hard disk for recording and managing file pointers, and so on. By the careful design of the 
interfaces within the PVR system, as will be described in more detail below, the instructions which the PVR application 
3154 sends to the underlying HDVR module 3850 correspond closely to the sort of axiomatic operations which are 
performed by the PVR, such as commencing playback at a given position in a stored programme, and stepping through 
the programme frame-by-frame. 

[0566] Whilst the interface 7000 between the PVR 3154 and the HDVR module 3850 can allow simpler applications 
to be developed, providing as it does several different commands each corresponding to a typical user operation, the 
interface 7002 between the recording and playback threads 3854, 3856, 3858 by contrast implements a minimal com- 
mand set, in particular providing only two commands for reproduction of data (one to set the reproduction speed, and 
one to set the reproduction position) which can allow the efficiency of the underlying FS library to be increased. The 
further interfaces between the FS library and devices, and between the devices and hardware, allow further levels of 
abstraction. 

[0567] Four principal levels of command that are provided will be described later, including a first top-most layer 
701 0 of commands (comprising the PVR routines), a second midrange layer 7012 of commands (comprising the rou- 
tines in the recording and playback threads 3854, 3856, 3858), a third layer 7014 of commands (comprising the FS 
library routines), and a fourth bottom-most layer of commands, comprising automata 7016. As mentioned above, of 
course, further layers of commands exist below and possibly above these four layers, but these are as earlier described. 
[0568] Underlying the playback aspects of the PVR system are the concepts of 'current reproduction position' and 
'current reproduction speed' (referred to elsewhere simply as 'current position' and 'current speed' respectively). These 
two values are interpreted by the hardware (hard disk, demultiplexers, remultiplexers, MPEG-2 decoder and/or FIFO 
systems) to control the playback of programmes and/or other data stored on the hard disk 2100, and can be altered 
by various parts of the controlling software, as will be described in more detail later. In terms of the recording aspect 
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of the PVR system, the concept of 'current recording position' is known, but by contrast a 'current recording speed' is 
meaningless. 

[0569] It should be noted that only the aspects of the interface relating to the HDVR playback thread 3858 will be 
considered here, but the reader will understand that the general principles described here can also be applied to the 

recording threads 3854, 3856 and their respective interfaces. 

[0570] With reference to Figure 41 , in overview, the six commands in the HDVR playback thread 3858 (the second 
command layer 7012) which are available to the PVR application 3154 (the 'HDVR playback routines') are shown: a 
seek_single_play() 7010, seek_slow_play() 7012, seek_normalj3lay() 7014, seek_fast_play() 7016, single_play() 
7018 and pause() 7020 routine. In turn, the FS library 3152 (third command layer 7014) provides two commands (the 
'FS library routines'): aset_pos() 7030 and aset_speed() 7032 routine. The PVR application 3154 is also shown (first 
command layer 7010), its constituent functions being described later, and below the FS library 3852 various devices 
are shown (such as the service device and mass storage device) with which the set_speed() and set_pos() routines 
communicate. The arrows in the figure indicate function calls which are typically made by each object or routine. 
[0571] The third command layer 7014, comprising the set_pos() 7030 and set_speed() 7032 routines, will first be 
described. 

[0572] The set_pos() and set_speed() routines have been provided following the discovery that any combination of 
typical playback operations, including the six routines 7010, 7012, 7014, 7016, 7018, 7020 provided by the HDVR 
playback thread 3858, could be distilled to a sequence of axiomatic commands setting either the current reproduction 
speed or current reproduction position. 

[0573] The setj30s() routine sets the current position of reproduction within a stream to a position specified as a 
parameter. In the preferred embodiment the parameter is a time offset in centiseconds from the beginning of the stored 
stream, but in variants of the preferred embodiment, different units are used. In further variants, the parameter specifies 
a byte-offset (or other spatial offset) from the beginning of the stored stream. As noted below, this latter variant is more 
efficient, but presents certain difficulties. 

[0574] The set_pos() command in turn sends a command containing the relevant byte-offset to the lower level device 

(s), such as the mass storage device 3728. It is important at this stage to recognise that a byte-offset from an origin 
in many types of encoded video or audio stream (and in MPEG 2, in particular) does not have a constant linear relation 
to the time offset from that origin. Therefore, in the preferred embodiment, a translation is required internally between 
the time offset and the spatial offset. This can be achieved to a given temporal resolution by using tables which map 
time offsets to byte-offsets, and refined by subsequently scanning and decoding a short length of the MPEG 2 data to 
find the desired frame. In a further variant, the parameter of the setjDos() command is an index into the above-men- 
tioned table of byte-offsets. 

[0575] For performance reasons, whenever the set_pos() command is invoked, it jumps to the specified position and 
then scans forward to find and display the first l-frame (or equivalent independent - as opposed to dependent - frame 
in formats other than MPEG) after that position. Since l-frames may typically occur every half second, this behaviour 
can result in slight 'jerkiness' in some applications (described below). In variants of the preferred embodiment, however, 
the set_pos() command causes the MPEG decoder to scan backwards until it finds the previous l-frame, and then 
forward again to the desired position (which can be a non-l-frame, such as an interpolated frame). Whilst slower, this 
latter behaviour can result in generally smoother playback (if the decoder is sufficiently advanced). 
[0576] The set_speed() routine sets the speed at which the stream is processed to the speed specified as a param- 
eter. Again bearing in mind the non-linear relationship between byte-offset and time, the speed is specified as a multiple 
of normal playback speed (that is, a parameter of greater than 1 is equivalent to fast-forwarding, and a parameter of 
less than 1 is equivalent to slow-play. Passing a parameter of 0 has the effect of pausing reproduction, and a negative 
parameter is equivalent to rewinding the stream. In variants of the preferred embodiment, the parameter is specified 
in different units, such as the number of frames per second (for example, 30 for normal playback), or the time in seconds 
between frames (the inverse of the number of frames per second, for example, 1/30 for normal playback). For video 
sources with a constant bit rate, or in situations where the variation in bit rate is for the given purpose possible to ignore 
(at high speeds of fast forwarding or rewinding, for example), the speed may also be specified in terms of bitrate. 
[0577] The nature of some encoding methods used for audiovisual and/or other types of data (such as MPEG 2, for 
example) is such that it cannot be read other than by starting from a given point, and advancing fonward through the 
signal in one direction, whereby a time point in the video signal advances as decoding proceeds. In other words, it 
cannot be decoded backwards. This is, in particular, the case for a video programme encoded in MPEG 2 format in 
the form of a collection of transport packets. This is independent of the transfer speed. In order to reproduce the data 
in a time-reversed manner, multiple short read operations are performed at successively earlier points in the stream, 
each time obtaining and then outputting a single frame, giving the impression of a time-reversed video signal. 
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Automata 

[0578] The fourth layer 7016 of commands implements an automaton which validates navigation functions, and 
transitions between navigation states. 
5 [0579] The automaton implemented by the fourth layer 7016 in preferred embodiments validates the linking of nav- 
igation functions as shown in the table. 
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State of the Automaton 



[0580] The letters a and b used in the table represent speeds of either playing, slow forwarding or rewinding, or fast 
30 forwarding or rewinding. 

[0581] The symbols in the lefthand column represent the state of the automaton upon receipt of a command, the 
symbols in the top row represent commands sent to the automaton, and the entries in the table represent the corre- 
sponding states of the automaton after execution of the commands. 

[0582] So for instance, if the initial automaton state is fast forwarding at speed a, and a jump chapter fonward com- 
35 mand is received, the system will jump forward one chapter and then play out at normal speed, rather than continuing 
to fast forward through the new chapter. 

[0583] The fourth command layer receives set jDosition and set_speed commands from the third command layer 
and, given the current state of the system, validates that the commands would produce a transition to an allowed state. 
If the commands would produce a transition to an allowed state then the commands are passed for execution. 

40 [0584] If the commands received by the fourth command layer would produce a transition to a state which is not 
allowed by the automaton, then in the simplest case the fourth command layer would cause the command to be ignored. 
[0585] However, in preferred embodiments, and for certain commands, and states of the system, if the commands 
received by the fourth command layer would produce a transition to a state which is not allowed by the automaton, 
then rather than causing the command to be ignored, the fourth command layer alters either the set_position or 

45 set_speed command and then checks whether this new command would produce a transition to a valid state. If so, 
the new command is passed for execution, and if not the command is again altered. This recursive attempt to validate 
a command, followed by amendment of the command proceeds until a command is produced which would cause a 
transition to a valid state. 

[0586] So, for instance in particular embodiments it is not allowed to jump to a new position in a file during a fast 
50 forwarding operation. 

[0587] Initially, during a fast forwarding operation the state of the system may be expressed by the following table, 
which records the state of the current set_position, X, and set_speed, V, commands, and flags whether these states 
have changed (flag value=1) or remain the same (flag value=0). 
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0 
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[0588] Upon receipt of a command to jump to a new position, the table cinanges:- 



X 


1 


1 


V 


3 


0 



[0589] The fourth command layer checks whether this transition is allowed, and then as the transition is not allowed 
in this case, causes the set_speed state to be altered, until a valid transition is found:- 



X 


1 


0 


V 


1 


0 



[0590] The flags are reset to zero as shown in the above table, the commands are executed, and the system plays 
out content at normal speed from the new position. 

[0591] The fourth command layer Is linked to parental control and conditional access mechanisms in preferred em- 
bodiments. States are allowed or disallowed by the automaton in dependence, in part, upon parental control or con- 
ditional access parameters. 

[0592] So, for instance, it is not allowed to fast fonward or rewind through particular chapters in a file containing 
advertisements, or to jump to particular chapters containing adult content, if the user does not have permission to view 

such content. 

[0593] An example of the operation of an embodiment in which the fourth command layer is linked to a parental 
control mechanism is described below. 

[0594] The state of the system is again expressed by a table, which records the state of the current set_position, X, 
and set_speed, V, commands, and flags whether these states have changed (flag value=1) or remain the same (flag 
value=0):- 



[0595] A setjDOS command is then received: 
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[0596] This command corresponds to a jump in position to a chapter which the user does not have permission to 
view. The fourth command layer thus causes the set_position to be amended, and checks whether the transition rep- 
resented by these commands is allowed:- 
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1 


0 



[0597] The command corresponds to a jump in position to a later chapter, which again the user does not have per- 
mission to view. The fourth command layer thus causes the set_position to be amended again, and again checks 
whether the transition represented by these commands is allowed. In this case the transition is allowed, the flags are 
reset to zero, the commands are passed for execution and the system plays content from a later chapter than that 
which was originally requested:- 
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1 


0 



[0598] Before commencing a description of the second layer 7012 of commands, the high-level PVR routines which 
embody the functionality of the PVR application (in the upper-most command layer 701 0) will now be described briefly. 
For the sake of clarity, to avoid confusion with lower-level routines, each routine in the PVR (the 'PVR routines') is 
given a symbol which is closely related to those typically encountered in respect of a conventional video recorder, and 
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the symbols are listed below in the table: 



PVR symbols 



Symbol 


Function 


H 
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Fast rewind 
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Slow forward 
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Slow rewind 


1 ■■ 1 


Next Index 
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Next Chapter 


c- 


Previous chapter 


QD 


Pause (fteeze frame on an image) 


H 


Stop 



30 

[0599] Typically, each of the above PVR application functions is invoked by the user pressing a single button on the 
remote control, or selecting a single option in an on-screen menu. Thus, they correspond to axiomatic commands from 
the point of view of the user (distinct to axiomatic commands from the point of view of the software (such as the 
35 set_speed() and set_pos() commands described earlier). Further or alternative functions to those listed above can, of 
course, be envisaged; in particular, the above could be adapted for use as an audio player, for example, with indices 
corresponding to music tracks, say. 

[0600] Still referring to Figure 41 , the six commands provided by the HDVR playback thread 3858, in the second 
command layer 7012, will now be described. 

40 [0601] As mentioned above, the six commands in the HDVR thread 3858 comprise four 'seek-play' operations: 
seek_single_play() 7010; seek_slowjDlay() 7012, seek_normal_play() 7014 and seek_fast_play() 7016. In addition to 
these basic operations, there are two other elementary operations: single_play() 7018 and pause() 7020. These op- 
erations together encapsulate the functionality of the above-mentioned setjoos() 7030 and set_speed() 7032 routines 
in higher-level routines which are of more use to the PVR application 3154 and similar applications. These routines 

45 will now be described in more detail. 

[0602] Each of the seek-play operation sets the positions of a current read pointer in the data stream and then 
continues to reproduce the stream forward of that pointer in one of several modes, in the process making use of both 
the set_pos 7030 and set_speed 7032 routines to achieve the desired effect. In the preferred embodiment, the param- 
eters of the six routines are equivalent to the parameters of the underlying set_pos() and set_speed() routines (that 

50 is, centisecond time offsets and multiples of normal play speed respectively). However, in variants of the preferred 
embodiment, different parameters (such as, for example, byte-offsets and inter-frame delay, respectively) may be spec- 
ified for the six routines 701 0, 701 2, 701 4, 701 6, 701 8, 7020, with the necessary translation of parameters taking place 
within the routines before the set_pos() and/or set_speed() routines are called. 
[0603] The operation of each of these routines will now be described. 

55 

seek_single_play() sets the current reproduction offset to the offset specified as a parameter of the routine, and 
then reproduces a single frame from (or as near as possible to) that offset, whilst the playback remains paused. 
It is used by PVR routines which alter the position in the stream (S,J^ , C-, C+) when the playback has been 
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paused ([}}]). 

seek_normalj3lay() sets the current reproduction offset to the offset specified as a parameter of the routine, and 
then reproduces the content of the data stream from that point forward, proceeding through the stream at normal 
5 speed. It is used during normal playback (as activated by the PVR play routine [ IB ]) by PVR routines which alter 

the position in the stream ( 0, 0 , C+). 

seek_fastjDlay() sets the current reproduction offset to the offset specified as a parameter of the routine, and then 
reproduces the content of the data stream from that point fonward, proceeding through the stream at greater than 
10 normal speed. It is used during fast forward play (♦♦) by PVR routines which alter the position in the stream ( 0, 

N , C-, C+). 

seek_slow_play() sets the current reproduction offset to the offset specified as a parameter of the routine, and 
then reproduces the content of the data stream from that point forward, proceeding through the stream at less 
15 than normal speed. It is used during slow forward play (>) by PVR routines which alter the position in the stream 

( 0, 1^ , C-, C+). 

single_play() is used by routines that advance frame-by-frame in the stream, when the routine pause (0 ) has 
already been invoked. It is also used in some derived routines, as will be described below. 

20 

pause() is used by the PVR pause routine (0 J. It causes the stream to be halted at the current frame. There is 
no stopQ routine as such, because the HDVR module does not itself directly control the display devices; mecha- 
nisms outside the HDVR module 3850 such as the service device 3736, video device 3734 and FIFO device 3744 
are used to actually control the video output, as described in more detail above. 

25 

[0604] In variants of the preferred embodiment, at least two of the seek_fast_play(), seek_slow_play() and 
seek_normal_play() routines are replaced by a single seek jolay() routine taking both an offset and a speed as a 
parameter. The possible permutations of these parameters are as described above in respect of the set_pos() and 
set_speed() routines. 

30 [0605] In the preferred embodiment, as noted above, different HDVR playback routines are called by the PVR routines 
depending on the current playback state (paused, normal, slow- or fast-forward). This can advantageously allow the 
HDVR playback routines to be simplified, so that they only need to cope with one mode of playback (such as paused 
or playing, fast-forwarding, rewinding, slow-playing and so on). In variants of the preferred embodiment, however, the 
HDVR playback routines are capable of operating in any play mode. 

35 [0606] At the same time, the underlying set_pos() and set_speed() routines are, like the PVR routines, independent 
of the play mode. In contrast to the HDVR playback routines, the FS library routines are simpler in structure, but 
potentially require more complex coding in order to cope with all eventualities of playback mode. 

Derived Functions 

40 

[0607] A wide range of derived functions can be implemented using any combination of the three layers 701 0, 701 2, 
7014 of commands described above. The following represents an examples of such functions. In these examples, the 
current reproduction position mentioned above is referred to as 'cur_pos'. 

[0608] As has been discussed above, reproducing in a truly time-reversed direction through the data stream is gen- 
45 erally not possible for MPEG-2 data, and difficult at best otherwise. Therefore, as mentioned above, time-reversed 
play is emulated by jumping backwards through the data stream, at each jump decoding a short segment of the data 
stream to obtain a single frame, and displaying each such frame. 

[0609] All such operations involving a movement backwards (in a 'rewind' direction) in the stream are derived from 
standard play operations. Description of these operations is illustrated in Figures 42 to 47, in which the data stream is 
50 represented by a horizontal line, and each vertical arrow represents reproduction of a particular point in the stream. 
During normal play, the stream is played in a left-to-right direction in the figures. 

[0610] Furthermore, as can be seen from the following, many routines using the 'seek_play' routines can alternatively 

be derived from only the single_play() routine. 

55 High speed reproduction in tine forward direction 

[0611] This operation may be embodied in the following sequence: 
pause 0 
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seek_fast_play (cur_pos) 

[061 2] Figure 42 illustrates the operation of the seek_fast_play() routine on MPEG data (comprising periodic l-frames, 
as shown). As can be seen, the audio/visual data is scanned forward at a high rate (limited by the decoding hardware 
to a maximum of between 8 to 12 times normal playback speed, for example), and Images are periodically displayed 
at the refresh rate. The displayed frames are a mixture of l-frames and non-l-frames, depending on where the MPEG 
decoder had reached at the time for the screen refresh. 

[061 3] As noted above, one of the more compact embodiments of the seek_singlejDlay() and related functions takes 
a parameter of the actual data offset in the audio/visual file, instead of the time offset. 

[0614] In the case where a very rapid advance is required, and in all additional cases where the MPEG-2 decoder 

is capable of doing so, a short routine can be constructed to effect a fast-forwarding function using the above-mentioned 
data-offset version of the seek_singlejDlay() routine. This short routine is shown below, with reference to Figure 43. 



pause 0 

Loop during play_time 

cur_pos += constant_data_offset 

seek_singlej)lay (cur jpos) // display the frame at the cur_pos data offset 

in the audio/visual file 

pause during pause_time // wait for next refresh 

EndLoop 

[0615] This method uses a technique of spaced forward jumps in the stream. The value of play_time corresponds 
to the duration for which the command remains active. It is also possible to adjust the value pause_time to modify 
the video rendition. 

[0616] The offset for each jump ('offset' in the code above) can be calculated as a multiple of the average bit rate of 
the audio/visual data, such that an offset of, for example, three times the average bit rate will result in a reproduction 
speed of approximately three times the normal play speed. As can be seen from Figure 43, however, the bit rate of 
the audio/visual data is typically not constant with respect to time (certainly for MPEG data), and so a constant data 
increment results in an uneven playback of frames. 

[0617] Nevertheless, using this latter method, the time taken to fast-forward is approximately constant regardless of 
the reproduction speed, so that the reproduction speed can be made arbitrarily high (such as 1 28 times normal playback 
speed) and otherwise easily varied during the fast-forwarding operation. It can also be observed that less time is spent 
scanning through the data in this example, as not all the data needs to be scanned. 

[0618] A more advanced fast-forwarding operation can be achieved using the following code, similar to the last but 

using the 'time offset' version of the seek_single play() routine (whereby the current reproduction position is specified 

as a time offset into the audio/visual data). 



pause() 

Loop during play_time 

cvir j)os constant_time_offset 
seek_single_play (curjpos) 
pause during pause_time 

EndLoop 
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[0619] The operation of this code is illustrated in Figure 44. In the present example, the constant_time_offset (and 
the granularity of the above-mentioned table mapping time offsets to data offsets and vice versa) are chosen to be a 
multiple of the period between l-frames. It can be seen that the time taken to decode is more uniform, and the frames 
displayed are equally spaced In terms of time, resulting in a smoother fast-forwarding action. With the modification 
(described previously) to the set_pos() routine to allow it to jump to frames other than l-frames which has previously 
been described so that non-l-f rames can be decoded, a fast-forward speed of other than a multiple of the l-frame period 
can effectively be used. 

[0620] An example of pseudocode required to perform the conversion between a time offset (•time_offset') and the 
appropriate data offset ('data_offset') using an index table ('index_table') containing both time offset and data offset 
fields is as follows: 



index = 0 

while (index_table [index] .time_offset < time_offset) 

{ index ++ } 

data_offset = index_table[index].data_offset 



[0621] The above code can of course be implemented in any of the appropriate routines which are detailed here. A 
slight variation of the above fast-forward routines, adapted to use the index table, is as follows: 

pauseQ 

cuMndex = GetCurIndex(cur_pos) // find current index using methods 

detailed above 

Loop during play_time 

cur_pos = index_table[cur_index].data_offset 
seek_singlejplay (cur_pos) 

cur_index+=n // higher values of n give faster effective 

reproduction speeds 

pause during pause_time 
EndLoop 



High speed reproduction in the reverse direction 

[0622] A basic (and fast) rewind function using data (not time) offsets is as follows (based on the simlar example 
above for fast-forwarding, and illustrated in Figure 45): 
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pauseQ 

Loop during play__time 

cur_pos - = constant_data_offset 

seek_single_j)lay (cur j)os) // version of the seek_single_play routine 

using data offsets as parameters 

pause during pause^time 
EndLoop 

[0623] As before, the speed of the reproduced video can be controlled by adjusting the duration of the delay (by 
varying the parameter pause_time), and varying the displacement within the stream, by adjusting the parameter 

constant_data_offset. 

[0624] Again, it can be seen that the distance between frames is erratic, and the progress backwards uneven. In this 
and the following example, care has to be taken that the jump backwards is sufficiently large to span at least one I- 
frame (otherwise, a loop could be entered which displayed the same l-frame endlessly). 
[0625] A more sophisticated version is shown in Figure 46, using time rather than data offsets: 
This may be done as follows, and is illustrated in Figure 45: 



pause() 

Loop during play__time 

cur_pos - = constant__time_offset 

seek_single_play (curjpos) // version of the seek_single_play() routine 

using time offsets 

pause during pause_time 
EndLoop 

[0626] As before, it may be appropriate to allow variation of the reproduction speed within, for example, 1 to 128 
times normal playing speed. 

Slow speed reproduction in tine forward direction > 

[0627] As illustrated in Figure 47, this feature can be embodied by the following code: 

pause() 

seek_slow_play(cur_pos) 

[0628] As shown in Figure 47, the effect of the seek_slow_play() command is to scan through the audio/visual data 
at a slower-than-normal rate and display all of the frames as per usual (except displaying certain or all of them for more 
than one screen refresh period, depending on the playback speed). 

[0629] An alternative embodiment of the slow-forward command, using the singlejDlay() command is as follows, 
with reference to Figure 48: 
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pause 

Loop dxaring play_time 

single j)lay () 

pause during pause_time 
EndLoop 

[0630] As noted above, the single_play() routine (as opposed to the seek_singlejDlay() routine) advances the audio/ 

visual data stream by one frame (including non-l-frames). The routine differs from the seek_slow_play() variant given 
above in that the speed of reproduction (or more generally, the transfer speed, as described elsewhere) can easily be 
customised by altering the pause_time variable. 

[0631] A further routine for achieving slow-forward capability, but using the seek_single jolay() command is as fol- 
lows: 

pause 

Loop during play_time 

cur_j)os +== constant_time_offset 
seek_single_play (cur j)os) 
pause during pause_time 
EndLoop 

[0632] This code is the same as one of the routines used to fast-forward, except that the pause_time and 
constant_time_offset are chosen so as to effect fast-forwarding at a speed less than the normal playback speed. This 
routine is more useful when the seek_single J3lay() routine is adapted to jump to non-l-frames as well as l-frames 
(reducing the time granularity from, for example, half a second to the normal refresh rate, such as 1/30 seconds) 

Slow speed reproduction in the reverse direction < 

[0633] To effect a slow speed reproduction, the procedure is as for the rewind function (♦♦), but with values of 
pause_time and current_time_offset chosen such that the (negative) reproduction speed is less than the magnitude 
of the normal playback speed. A typical code fragment is as follows: 

pauseO 

Loop during play_time 

cur_pos - = current_time_offset 

seek_singlejplay (cur_pos) 

pause during pause__time 
EndLoop 
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[0634] Again, the current_time_offset and pause_time parameters may be varied, and better results will be achieved 
with the version of the seek_singlejDlay() routine capable of jumping to non-l-frames as well as l-frames. 

Complex Functions 

[0635] The three layers 7010, 7012, 7014 of commands (and more particularly the lower layers 7012, 7014) can be 
used to construct further commands that perform functions of arbitrary complexity. The following examples illustrate 
the power of the command layers (the 'basic commands') described above. 

Example 1: Sequence of actions - H , C+, 0 , 0,, 

[0636] Expressed in terms of basic functions, this function can be implemented by the following sequence: 

seek_normal_play (cur_pos) 

cvir_pos = chapter_table [next_chapter].time_offset 

seek_normal_play (cur_pos) 

pause() 

single_play (curjpos) 
seek_slow_play (cur_pos) 
seek_normal jplay (cur_pos) 

Example 2: Sequence of actions - H , !^ , 0 , E , C- 

[0637] Expressed in terms of basic commands, this function can be implemented by the following sequence: 

seek_normal j)lay (cur_pos) 

cur__pos = user_table [next_user_index].time__offset 

seek_normal_play (cur_pos) 

pauseQ 

seek_normaljplay (cur_pos) 

curj)os = chapter_table [previous_chapter].time_offset 
seek_normal_play (cur_pos) 

Example 3: Sequence of actions - B , C+, E ,♦♦,>, 0, 

[0638] Expressed in terms of basic commands, this function can be implemented by the following sequence: 



53 



EP 1 286 349 A1 



seek_normaljplay (cur_pos) 

cur_pos = chapter_table [next_chapter].time_offset 

seek_normal_j)lay (curjpos) 

pauseQ 

Loop during play_time 

cur JOS - == current_time_offset 

seek_singlejplay (cur j)os) 

pause during pause__time 
EndLoop 

seek_slow__play (cur_pos) 
pauseQ 

[0639] As can be observed from the above, the three layers 7010, 7012, 7014 of command sets each provide a 
flexible yet simple interface to higher and lower software layers, and can easily be incorporated into other routines to 

provide higher levels of functionality. 

[0640] The system described above can also be adapted to control general transfers, such as a recording, rather 
than a reproduction, process. Accordingly, for the recording example, the set_pos() command sets the position from 
which recording is to take place, and the set_speed() command sets the recording speed (which in some embodiments 
can be set to other than normal recording speeds, to enable recording at lower frame-rates or generally lower quality, 
for example). Furthermore, the recording and reproduction processes can be combined to provide time-shifting func- 
tionality. 

[0641] The precise details of the implementation of the various functions described above, and their distribution 
between hardware and software, are a matter of choice for the implementor and will not be described in detail. It is, 
however, noted that dedicated integrated circuits capable of performing the operations required in the receiver/decoder 
are commercially available or can be readily designed, and these can be used as the basis for a hardware accelerator, 
or more preferably modified to produce a dedicated hardware accelerator, to implement various of the operations 
required, thereby reducing the processing power required to run the software. However, the operations required may 
be implemented in software if sufficient processing power is available. 

[0642] The modules and other components have been described in terms of the features and functions provided by 
each component, together with optional and preferable features. With the information given and specifications provided, 
actual implementation of these features and the precise details are left to the implementor. As an example, certain 
modules could be implemented in software, preferably written in the C programming language and preferably compiled 
to run on the processor used to run the application; however, some components may be run on a separate processor, 
and some or all components may be implemented by dedicated hardware. 

[0643] The above modules and components are merely illustrative, and the invention may be implemented in a 

variety of ways, and, in particular, some components may be combined with others which perform similar functions, or 
some may be omitted in simplified implementations. Hardware and software implementations of each of the functions 
may be freely mixed, both between components and within a single component. 

[0644] It will be readily understood that the functions performed by the hardware, the computer software, and such 
like are performed on or using electrical and like signals. Software implementations may be stored in ROM, or may be 
patched in FLASH. 

[0645] It will be understood that the present invention has been described above purely by way of example, and 
modification of detail can be made within the scope of the invention. 

[0646] Each feature disclosed in the description, and (where appropriate) the claims, the appendix (containing text 
and figures from International Patent Application No. PCT/IB01/01 845 in the name of Canal+ Technologies Societe 
Anonyme, and whose content is intended as part of this patent application) and the drawings may be provided inde- 
pendently or in any appropriate combination. 
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[0647] Reference numerals appearing in the claims are by way of illustration only and shall have no limiting effect 
on the scope of the claims. 

Claims 

1. A table comprising at least one record mapping a respective data offset in a file containing a representation of a 
bitstream to a corresponding time offset in the bitstream. 

2. A table according to Claim 1 , wherein the bitstream is a variable bitrate bitstream. 

3. A table according to Claimi or 2, wherein the table comprises at least three records, and the time offsets are 
periodic. 

4. A table according to Claim 3, wherein the period of the time offsets is varied. 

5. A table according to Claim 3 or 4, wherein the period of the time offsets is chosen to match a characteristic of the 
bitstream, and is preferably 0.5, 1 , 2 or 1 0 seconds. 

6. A table according to any of Claims 1 to 5, wherein :- 

the bitstream comprises at least one portion of bitstream data which can independently be used to regenerate 

a respective at least one portion of audiovisual data; and 

the time offset of the at least one record corresponds to the respective at least one portion of bitstream data. 

7. A table according to Claim 6, wherein the at least one portion of bitstream data comprises a key frame. 

8. A table according to the Claim 7, wherein the bitstream comprises MPEG data, and the at least one portion of 
bitstream data comprises an intra-frame. 

9. A table according to any of Claims 6 to 8, wherein the bitstream comprises at least one further portion of bitstream 
data which can be used to regenerate a portion of audiovisual data in conjunction with the at least one portion of 
bitstream data, and preferably the at least one further portion of bitstream data comprises a delta frame. 

10. A table according to any of Claims 1 to 9, wherein the table is generated automatically during recordal of the 
representation of the bitstream in the file. 

11. A table according to any of Claims 1 to 10, wherein at least one record in the table is mapped to a respective at 
least one further record, and preferably the said at least one further record comprises conditional access information 
or content management information. 

12. A table according to the Claim 11 , wherein the said at least one further record is stored in a further table. 

13. A table according to Claim 12, wherein the said at least one further record is inserted upon command of a user. 

14. A table according to any of Claims 11 to 13, wherein the said at least one record in the table is mapped to the 
respective at least one further record upon command of a user. 

15. A table according to any of Claims 1 to 14, wherein the file is encoded and the at least one record maps a data 
offset in the encoded file to a corresponding time offset in the bitstream. 

16. A table according to any of Claims 1 to 15, wherein records are inserted in dependence upon characteristics of 

the bitstream. 

17. A table according to any of Claims 1 to 16, wherein at least one record is inserted upon command of a user. 

18. A table according to any of Claims 1 to 17, wherein at least one record is inserted automatically. 
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19. A table according to any of Claims 1 to 18 adapted for storage in a file with the representation of the bitstream. 

20. A method of facilitating the searching of a file containing a representation of a bitstream, comprising generating a 
table comprising at least one record mapping a respective data offset in a file containing a representation of a 
bitstream to a corresponding time offset in the bitstream. 

21. A method according to Claim 20, wherein the bitstream is a variable bitrate bitstream. 

22. A method according to Claim 20 or 21 , wherein the table comprises at least three records, and the time offsets 
are periodic. 

23. A method according to Claim 22, wherein the period of the time offsets is chosen to match a characteristic of the 
bitstream, and is preferably 0.5, 1 , 2 or 1 0 seconds. 

24. A method according to any of Claims 20 to 23, wherein :- 

the bitstream comprises at least one portion of bitstream data which can independently be used to regenerate 

a respective at least one portion of audiovisual data; and 

the time offset of the at least one record corresponds to a respective at least one of portion of bitstream data. 

25. A method according to Claim 24, wherein the at least one portion of bitstream data comprises a key frame. 

26. A method according to the Claim 25, wherein the bitstream comprises MPEG data, and the at least one portion of 
bitstream data comprises an intra-frame. 

27. A method according to any of Claims 24 to 26, wherein the bitstream comprises at least one further portion of 
bitstream data which can be used to regenerate a portion of audiovisual data in conjunction with the at least one 
portion of bitstream data, and preferably the at least one further portion of bitstream data comprises a delta frame. 

28. A method according to any of Claims 20 to 27, wherein the table is generated automatically during recordal of the 
representation of the bitstream in the file. 

29. A method according to any of Claims 20 to 28, wherein at least one record in the table is mapped to a respective 
at least one further record, and preferably the said at least one further record comprises conditional access infor- 
mation or content management information. 

30. A method according to the Claim 29, wherein the said at least one further record is stored in a further table. 

31. A method according to Claim 30, wherein the said at least one further record is inserted upon command of a user. 

32. A table according to any of Claims 29 to 31 , wherein the at least one record in the table is mapped to the respective 
at least one further record upon command of a user. 

33. A method according to any of Claims 29 to 32, wherein the file is encoded and the at least one record maps a data 
offset in the encoded file to a corresponding time offset in the bitstream. 

34. A method according to any of Claims 20 to 33, wherein at least one record is inserted in dependence upon char- 
acteristics of the bitstream. 

35. A method according to any Claims 20 to 34, wherein at least one record is inserted upon the command of a user. 

36. A method according to any of Claims 20 to 35, wherein at least one record is inserted automatically. 

37. A method according to any of Claims 20 to 36, further comprising storing the table in a file, preferably containing 
the representation of the bitstream. 

38. A method of searching a file containing a representation of a bitstream for a desired portion of data, comprising 
the steps of jumping to a position in the file, and reading data from this position until the desired portion of data is 
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found. 

39. A method according to Claim 38, wlierein tine bitstream is a variable bitrate bitstream. 

40. A method according to Claim 38 or 39, wherein the desired portion of data is representative of bitstream data which 
can independently be used to regenerate a portion of audiovisual data 

41. A method according to any of Claims 38 to 40, wherein the step of jumping to a position in the file comprises 
reading a record from a table according to any of Claims 1 to 1 9 and jumping to the data offset given in the record. 

42. A method according to any of Claims 38 to 41 , wherein:- 

the step of jumping to a position in the file comprises reading a record from a table according to any of Claims 
11 to 19 and jumping to the data offset given in the record; and 
the at least one further record is used in the step of reading data. 

43. A method according to any of Claims 38 to 42, wherein the data offset in the record corresponds to the desired 
position in the file. 

44. A method of searching a file containing a representation of a bitstream for a plurality of desired portions of data, 
comprising searching for each desired portion of data using a method according to any of Claims 38 to 43. 

45. A method according to Claim 44, wherein the desired portions of data are representative of portions of bitstream 
data which are periodically spaced in time. 

46. A method according to Claim 44 or 45, wherein the desired portions of data are used to effect a fast forwarding or 

rewinding operation. 

47. A method according to Claim 46, wherein the time period between the portions of bitstream data represented by 
the desired portions of data is chosen to effect a given fast-fonwarding or rewinding speed. 

48. A method according to Claim 47, wherein the time period between the portions of bitstream data represented by 
the desired portions of data is chosen in dependence upon a characteristic of a means used to carry out the method. 

49. A method according to Claim 48, wherein the characteristic is the maximum sustainable rate of retrieval or process- 
ing of data from the file. 

50. A method according to Claim 48 or 49, wherein the characteristic is a read/write hard disk access time, or a parsing 
demultiplexer bandwidth, or an operating system scheduling accuracy. 

51 . A method according to any of Claims 46 to 50, wherein the given fast-forwarding or rewinding speed is varied upon 
command of a user. 

52. A file, comprising a representation of a bitstream, and a table as claimed in any of Claims 1 to 19. 

53. A processor for generation of a table according to any of Claims 1 to 19. 

54. A processor for analysis of characteristics of a bitstream and insertion of records in a table according to any of 
Claims 1 to 19 in dependence upon this analysis. 

55. A storage means for storage of a table according to any of Claims 1 to 19. 

56. A storage means according to Claim 55 for storage of the file containing a representation of a bitstream. 

57. A hard disk video recorder comprising a storage means according to Claim 55 or 56 and preferably further com- 
prising a processor according to Claim 53 or 54. 

58. A receiver/decoder comprising a hard disk video recorder according to Claim 57. 
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59. A receiver/decoder adapted to communicate with a liard disk video recorder according to Claim 57. 

60. A broadcast system incorporating a receiver/decoder according to Claim 58 or 59. 

61. Apparatus for evaluating a position in a bit stream, comprising means for estimating the position. 

62. Apparatus according to Claim 61 , wherein the means for estimating the position is adapted to estimate the position 
in dependence on a known position in the bit stream. 

63. Apparatus according to Claim 62, further comprising means for selecting the known position from a plurality of 
alternatives. 

64. Apparatus according to Claim 63, wherein the means for selecting the known position is adapted to select the 
known position in dependence on its proximity to the position to be evaluated. 

65. Apparatus according to Claim 63 or 64, wherein the means for selecting the known position is adapted to select 
systematically one of the two known positions closest to the position to be evaluated. 

66. Apparatus according to any of Claims 63 to 65, wherein the means for selecting the known position is adapted to 
select the known position as a transition in the bit stream between a first and second portion of the bit stream. 

67. Apparatus according to any of Claims 62 to 66, wherein the means for estimating the position is adapted to estimate 
the position as an offset from the known position. 

68. Apparatus according to any of Claims 62 to 67, wherein the means for estimating the position is adapted to estimate 
the position in dependence on a buffer size. 

69. Apparatus according to any of Claims 62 to 68, wherein the means for estimating the position is adapted to estimate 
the position in dependence on a security parameter. 

70. Apparatus according to any of Claims 61 to 69, further comprising means for storing the bit stream. 

71. Apparatus according to Claim 70, further comprising means for storing data associated with the bit stream sepa- 
rately from the bit stream. 

72. Apparatus according to Claim 71, wherein the means for storing data associated with the bit stream separately 
from the bit stream is adapted to store conditional access data. 

73. Apparatus for manipulating a bit stream, comprising means for receiving conditional access data, means for syn- 
chronising the conditional access data with the bit stream, and means for storing the bit stream. 

74. Apparatus according to Claim 73, further comprising means for storing the conditional access data separately to 
the bit stream. 

75. Apparatus according to any of Claims 72 to 74, wherein the means for synchronising is adapted to create a refer- 
ence between the conditional access data and a corresponding position in the bit stream. 

76. Apparatus according to Claim 75, further comprising means for storing the reference in a table. 

77. Apparatus according to Claim 75 or 76, wherein the means for synchronising is adapted to select the referenced 
position such that it falls within a portion of the bit stream to which the conditional access data corresponds. 

78. Apparatus according to Claim 77, wherein the means for synchronising is adapted to select the referenced position 
such that it falls within a cryptoperiod to which the conditional access data corresponds. 

79. Apparatus according to any of Claims 75 to 78, wherein the means for synchronising is adapted to select the 
referenced position in dependence on an event signifying the receipt of the conditional access data by the receiving 
means. 
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80. Apparatus according to any of Claims 75 to 79, furtlier comprising means for estimating a position in tlie bit stream, 
and wherein the referenced position is selected in dependence on the estimated position. 

81. Apparatus according to any of Claims 61 to 72 and 80, further comprising means for transferring the bit stream In 
a plurality of discrete segments, and wherein the means for estimating the position is adapted to estimate the 
position in dependence on an end of one of the segments. 

82. Apparatus according to Claim 81 , further comprising means for predetermining the size of at least one segment. 

83. Apparatus for manipulating a bit stream, comprising means for transferring the bit stream in a plurality of discrete 
segments, and means for estimating a position in the bit stream in dependence on a property of one of the seg- 
ments. 

84. Apparatus according to Claim 83, further comprising means for predetermining the size of a segment. 

85. Apparatus according to Claim 82 or 84, wherein the means for predetermining the size is adapted to predetermine 
a size equivalent to less than a portion of the bit stream associated with the position. 

86. Apparatus according to any of Claims 82, 84 and 85, wherein the means for predetermining the size is adapted 
to predetermine the size in dependence on a characteristic of the bit stream. 

87. Apparatus according to any of Claims 82 and 84 to 86, wherein the means for predetermining the size is adapted 
to predetermine the size in dependence on a bit rate of the bit stream. 

88. Apparatus according to any of Claims 82 and 84 to 87, wherein the means for predetermining the size is adapted 
to predetermine a constant size. 

89. Apparatus according to any of Claims 82 and 84 to 88, wherein the means for predetermining the size comprises 
a static filter. 

90. Apparatus according to any of Claims 82 and 84 to 87, wherein the means for predetermining the size is adapted 
to predetermine a variable size. 

91. Apparatus according to any of Claims 82 and 84 to 90, wherein the means for predetermining the size comprises 
a dynamic filter. 

92. Apparatus according to any of Claims 82 and 84 to 91 , wherein the means for predetermining the size comprises 
at least one of a rapid dynamic filter, an inertial dynamic filter, and a hybrid dynamic filter. 

93. Apparatus according to any of Claims 61 to 72 and 82 to 92, wherein the means for estimating the position is 
adapted to take into account an error in at least one previous estimate. 

94. Apparatus according to any of Claims 61 to 72 and 82 to 93, further comprising means for estimating the position 
in dependence on at least one characteristic of the bit stream. 

95. Apparatus for evaluating a position in a bit stream, comprising means for estimating the position in dependence 
on at least one characteristic of the bit stream. 

96. Apparatus according to Claim 94 or 95, wherein the or each characteristic is at least one of a bit rate of the bit 
stream, the relative position within the bit stream, and the time elapsed between parts of the bit stream. 

97. Apparatus according to any of Claims 94 to 96, further comprising means for estimating a measure of separation 
between the occurrence of the position and the occurrence of an event relating to the position. 

98. Apparatus according to Claim 97, wherein the means for estimating the position in the bit stream is adapted to 
incorporate the measure of separation, preferably in conjunction with an estimate of the bit rate of the bit stream 
close to the position in the bit stream. 
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99. Apparatus according to Claim 97 or 98, wherein the means for estimating a measure of separation is adapted to 
measure the separation between the occurrence of the position and the end of a processing operation. 

100. A receiver/decoder incorporating apparatus as claimed In any of Claims 61 to 99. 
101 .A method of evaluating a position in a bit stream, comprising estimating the position. 

102. A method of manipulating a bit stream, comprising receiving conditional access data, synchronising the conditional 
access data with the bit stream, and storing the bit stream. 

103. A method of manipulating a bit stream, comprising transferring the bit stream in a plurality of discrete segments, 
and estimating a position in the bit stream in dependence on a property of one of the segments. 

104. A method of evaluating a position in a bit stream, comprising estimating the position In dependence on at least 
one characteristic of the bit stream. 

105. A broadcast system comprising a broadcast centre and a receiver/decoder as claimed in Claim 100. 

106. A computer program product adapted to carry out a method as claimed in any of claims 101 to 104. 

107. A computer readable medium having stored thereon a computer program product as claimed In Claim 106. 

108. A signal tangibly embodying a computer program product as claimed in Claim 106. 

109. A command for controlling the transfer of an audio/visual bit stream, wherein the transfer speed is represented as 
a parameter. 

110. A command according to Claim 109, wherein the speed Is positive, zero and/or negative. 

1 1 1 -A command according to Claim 1 09 or 1 1 0, wherein the speed Is related to the parameter by a multiple of a normal 
transfer speed. 

112. A command according to any of Claims 109 to 111 , wherein a position at which the transfer is to take place Is 
represented as a parameter. 

113. A command for controlling the transfer of an audio/visual bit stream, wherein the position at which the transfer Is 
to take place Is represented as a parameter. 

1 1 4. A command according to Claim 1 1 2 or 1 1 3, wherein the parameter specifying the position at which the transfer Is 
to take place is related to a measure of time. 

115. A command according to Claim 113, wherein the parameter specifying the position at which the transfer Is to take 
place Is related to an offset In the bit stream. 

116. A command set, comprising at least one command as claimed in any of the preceding claims. 

1 1 7. A command set for controlling the transfer of an audio/visual bit stream, comprising a command having the position 
at which the transfer is to take place represented as a parameter, and a command having the transfer speed 
represented as a parameter. 

1 18. A command for controlling the transfer of an audio/visual bit stream, the command adapted to Invoke at least one 
command as claimed in any of Claims 109 to 115. 

119. A command according to Claim 118, adapted to selectively invoke different further commands in dependence on 
a state relating to the transfer of the audio/visual bit stream. 

120. A command according to Claim 118 or 119, adapted to invoke a command as claimed in any of Claims 109 to 111 , 
with a parameter equivalent to a normal playback speed, and invoke a command as claimed in any of Claims 112 
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to 115, with a parameter equivalent to a position in tine audio/visual bit stream. 

121 .A command according to any of Claims 118 to 120, adapted to invoke a command as claimed in any of Claims 
1 09 to 11 1 , with a parameter equivalent to zero speed. 

122. A command according to any of Claims 118 to 121, adapted to invoke a command as claimed in any of Claims 
1 09 to 11 1 , with a parameter equivalent to a greater than normal playback speed. 

123. A command according to any of Claims 118 to 122, adapted to invoke a command as claimed in any of Claims 1 
to 3, with a parameter equivalent to a less than normal playback speed. 

124. A command according to any of Claims 118 to 123, adapted to invoke a command as claimed in any of Claims 
1 09 to 11 1 , with a parameter equivalent to a negative playback speed. 

125. A command according to any of Claims 11 8 to 124, adapted to invoke a command as claimed in any of Claims 1 
to 3, with a parameter equivalent to a normal playback speed. 

126. A command according to any of Claims 118 to 125, adapted to invoke a command as claimed in any of Claims 
112 to 115, with a parameter equivalent to the location. 

127. A command according to any of Claims 1 1 8 to 126, adapted to cause the or a further audio/visual bit stream to be 
stored. 

128. A command for controlling the transfer of an audio/visual bit stream, the command adapted to invoke at least one 
command as claimed in any of Claims 118 to 127. 

1 29. A command as claimed in any of Claims 1 09 to 1 1 5 and 1 1 8 to 1 28, wherein the command corresponds to a user- 
selectable audio/visual control operation. 

130. A method of controlling the transfer of a audio/visual bitstream, comprising comparing a command according to 
any of Claims 1 09 to 1 1 5 or 1 1 8 to 1 29 to a control criterion, and generating a further command if the command 
does not match the control criterion. 

131 -A method according to Claim 130, wherein the command is a further command generated according to Claim 130. 

132. A method according to Claim 130 or 131, wherein the control criterion is dependent upon a characteristic of the 
transfer of the audio/visual bitstream, preferably of the transfer occurring at the time of receipt of the command. 

133. A method according to Claim 132, wherein the characteristic of the transfer of the audio/visual bitstream is a 
transfer speed and or a position in the bitstream. 

1 34. A method according to any of Claims 1 30 to 1 33, wherein the control criterion is dependent upon conditional access 
and or parental control data. 

135. An operating system, comprising at least one command as claimed in any of Claims 109 to 115 and 118 to 128, 
preferably adapted to carry out a method according to any of Claims 130 to 134, 145 or 146. 

136. A receiver/decoder, comprising at least one command as claimed in any of Claims 109 to 115 and 118 to 128, 
preferably adapted to carry out a method according to any of Claims 130 to 134, 145 or 146. 

1 37. A receiver/decoder, adapted to invoke at least one command as claimed in any of Claims 1 09 to 1 1 5 and 1 1 8 to 1 28. 

138. A computer program product, comprising at least one command as claimed in any of Claims 109 to 115 and 118 
to 128. 

139. A computer readable medium, comprising a computer program product as claimed in Claim 138. 

140. A signal, tangibly embodying a computer program product as claimed in Claim 138. 
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141 .Apparatus for processing audio/visual data, comprising means for receiving audio/visual data, means for outputting 
audio/visual data, and means for executing at least one command as claimed in any of Claims 109 to 115 and 118 
to 126 and or carrying out a method according to any of Claims 130 to 134, 145 or 146. 

142. Apparatus for processing audio/visual data, comprising an input, an output, and a processor and associated mem- 
ory, the processor being adapted to execute at least one command as claimed in any of Claims 109 to 115 and 
1 1 8 to 1 26, and or to carry out a method according to any of Claims 1 30 to 1 34, 1 45 or 1 46. 

143. An audio/visual processing device, comprising apparatus as claimed in Claim 141 or 142. 

144. A broadcast system, comprising a receiver/decoder according to Claim 136 or 137. 

145. A method of controlling the transfer of an audio/visual bit stream, comprising invoking a command to set the transfer 
speed, and passing the transfer speed as a parameter to the command. 

1 46. A method of controlling the transfer of an audio/visual bit stream, comprising invoking a command to set a position 
at which the transfer is to take place, and passing the position as a parameter. 
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